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1. Introduction 





This document describes the functionality and electrical specifications of the contactless 
reader/writer MFRC522. 


Remark: The MFRC522 supports all variants of the MIFARE Mini, MIFARE 1K, 
MIFARE 4K, MIFARE Ultralight, MIFARE DESFire EV1 and MIFARE Plus RF 
identification protocols. To aid readability throughout this data sheet, the MIFARE Mini, 
MIFARE 1K, MIFARE 4k, MIFARE Ultralight, MIFARE DESFire EV1 and MIFARE Plus 
products and protocols have the generic name MIFARE. 


1.1 Differences between version 1.0 and 2.0 


The MFRC522 is available in two versions: 


¢ MFRC52201HN1, hereafter referred to version 1.0 and 
¢ MFRC52202HN1, hereafter referred to version 2.0. 


The MFRC522 version 2.0 is fully compatible to version 1.0 and offers in addition the 
following features and improvements: 


¢ Increased stability of the reader IC in rough conditions 
¢ An additional timer prescaler, see Section 8.5. 
¢ Acorrected CRC handling when RX Multiple is set to 1 


This data sheet version covers both versions of the MFRC522 and describes the 
differences between the versions if applicable. 


2. General description 





The MFRC522 is a highly integrated reader/writer IC for contactless communication 
at 13.56 MHz. The MFRC522 reader supports ISO/IEC 14443 A/MIFARE and NTAG. 


The MFRC522’s internal transmitter is able to drive a reader/writer antenna designed to 
communicate with ISO/IEC 14443 A/MIFARE cards and transponders without additional 
active circuitry. The receiver module provides a robust and efficient implementation for 
demodulating and decoding signals from ISO/IEC 14443 A/MIFARE compatible cards and 
transponders. The digital module manages the complete ISO/IEC 14443 A framing and 
error detection (parity and CRC) functionality. 


The MFRC522 supports MF1xxS20, MF1xxS70 and MF1xxS50 products. The MFRC522 
supports contactless communication and uses MIFARE higher transfer speeds up to 
848 kBd in both directions. 
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The following host interfaces are provided: 


* Serial Peripheral Interface (SPI) 
* Serial UART (similar to RS232 with voltage levels dependant on pin voltage supply) 


¢ |2C-bus interface 


3. Features and benefits 





Highly integrated analog circuitry to demodulate and decode responses 


Buffered output drivers for connecting an antenna with the minimum number of 
external components 


Supports ISO/IEC 14443 A/MIFARE and NTAG 

Typical operating distance in Read/Write mode up to 50 mm depending on the 

antenna size and tuning 

Supports MF1xxS20, MF1xxS70 and MF1xxS50 encryption in Read/Write mode 

Supports ISO/IEC 14443 A higher transfer soeed communication up to 848 kBd 

Supports MFIN/MFOUT 

Additional internal power supply to the smart card IC connected via MFIN/MFOUT 

Supported host interfaces 

@ SPI up to 10 Mbit/s 

@ |?C-bus interface up to 400 kBd in Fast mode, up to 3400 kBd in High-speed mode 

@ RS232 Serial UART up to 1228.8 kBd, with voltage levels dependant on pin 
voltage supply 

FIFO buffer handles 64 byte send and receive 

Flexible interrupt modes 

Hard reset with low power function 

Power-down by software mode 

Programmable timer 

Internal oscillator for connection to 27.12 MHz quartz crystal 

2.5 V to 3.3 V power supply 

CRC coprocessor 

Programmable I/O pins 

Internal self-test 


4. Quick reference data 






























































Table 1. Quick reference data 

Symbol /|Parameter Conditions Min |Typ' |Max_ |Unit 
VppaA analog supply voltage VppiPvpp) £ Vpopa = Vppp = Vppctvop); 2] 2.5 3.3 3.6 V 
Vppp digital supply voltage Yssa= Vssp = Vsspvss) = Vssctvss) = 0 V 25 33 36 V 
Vppctvpp) | TVDD supply voltage 2.5 3.3 3.6 Vv 
Vpp(pvpp) |PVDD supply voltage (31 /1.6 1.8 3.6 Vv 
Vppisvpp) |SVDD supply voltage —| Vssa = Vssp = Vssipvss) = Vssctvss) = 0 V 16 = - 3.6 |V 
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Table 1. Quick reference data ...continued 
Symbol /|Parameter Conditions Min |Typ' |Max_ |Unit 
loa power-down current Vppa = Vppp = Vppctvpp) = Vpp(Pvpb) =3V 
hard power-down; pin NRSTPD set LOW {4] | - < 5 HA 
soft power-down; RF level detector on {4] |- - 10 HA 
Ippp digital supply current pin DVDD; Vppp = 3 V - 6.5 9 mA 
IppA analog supply current pin AVDD; Vppa = 3 V, CommandReg register’s - 7 10 mA 
RevOff bit = 0 
pin AVDD; receiver switched off; Vppa = 3 V, - 3 5 mA 
CommandReg register’s RevOff bit = 1 
Ipp(pvop) |PVDD supply current pin PVDD 5] |- - 40 mA 
Ippctvpp) + TVDD supply current pin TVDD; continuous wave (617118) | - 60 100 mA 
Tamb ambient temperature HVQFN32 25 s- +85 (°C 





























[1] Supply voltages below 3 V reduce the performance in, for example, the achievable operating distance. 


[2] Vppa, V 
[3] VppPvol 


[4] Ipg is the total current for all supplies. 





ppp and Vppitvpp) must always be the same voltage. 


p) must always be the same or lower voltage than Vppp. 


[5] Ipp(pvpp) depends on the overall load at the digital pins. 


[6] Ippctvpp) depends on Vppitvpp) and the external circuit connected to pins TX1 and TX2. 


[7] During typical circuit operation, the overall current is below 100 mA. 


[8] Typical value using a complementary driver configuration and an antenna matched to 40 Q between pins TX1 and TX2 at 13.56 MHz. 


5. Ordering information 























Table 2. Ordering information 
Type number Package 
Name Description Version 

MFRC52201HN1/TRAYBL!] HVQFN32z2 |plastic thermal enhanced very thin quad flat package; no leads; SOT617-1 
32 terminal; body 5 x 5 x 0.85 mm 

MFRC52201HN1/TRAYBMI2] HVQFN32 [plastic thermal enhanced very thin quad flat package; no leads; SOT617-1 
32 terminal; body 5 x 5 x 0.85 mm 

MFRC52202HN1/TRAYBH] HVQFN32z2 |plastic thermal enhanced very thin quad flat package; no leads; SOT617-1 
32 terminal; body 5 x 5 x 0.85 mm 

MFRC52202HN1/TRAYBME] |HVQFN32 plastic thermal enhanced very thin quad flat package; no leads; SOT617-1 
32 terminal; body 5 x 5 x 0.85 mm 




















[1] Delivered in one tray. 


[2] Delivered in five trays. 
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6. Block diagram 





MFRC522 


The analog interface handles the modulation and demodulation of the analog signals. 


The contactless UART manages the protocol requirements for the communication 


protocols in cooperation with the host. The FIFO buffer ensures fast and convenient data 


transfer to and from the host and the contactless UART and vice versa. 


Various host interfaces are implemented to meet different customer requirements. 










++] REGISTER BANK | BANK 


ANTENNA | ANALOG |, ,I CONTACTLESS Es 
es Jee — UART 
SPI HOST 


a BUS 


001aaj627 


Fig 1. Simplified block diagram of the MFRC522 
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Fig 2. Detailed block diagram of the MFRC522 
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7. Pinning information 











Fig 3. 
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7.1. Pin description 


















































Table 3. Pin description 
Pin Symbol Typel] |Description 
1 12C | 12C-bus enable input!2! 
2 PVDD P pin power supply 
3 DVDD P digital power supply 
4 DVSS G digital groundl?! 
5 PVSS G pin power supply ground 
6 NRSTPD I reset and power-down input: 
power-down: enabled when LOW; internal current sinks are switched off, the oscillator 
is inhibited and the input pins are disconnected from the outside world 
reset: enabled by a positive edge 
7 MFIN | MIFARE signal input 
8 MFOUT O MIFARE signal output 
9 SVDD P MFIN and MFOUT pin power supply 
10 TVSS G transmitter output stage 1 ground 
11 TX1 O transmitter 1 modulated 13.56 MHz energy carrier output 
12 TVDD P transmitter power supply: supplies the output stage of transmitters 1 and 2 
13 TX2 O transmitter 2 modulated 13.56 MHz energy carrier output 
14 TVSS G transmitter output stage 2 ground 
15 AVDD P analog power supply 
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Table 3. Pin description ...continued 








































































































Pin Symbol Typel'] |Description 
16 VMID P internal reference voltage 
17 RX I RF signal input 
18 AVSS G analog ground 
19 AUX1 O auxiliary outputs for test purposes 
20 AUX2 O auxiliary outputs for test purposes 
21 OSCIN I crystal oscillator inverting amplifier input; also the input for an externally generated clock 
(fo = 27.12 MHz) 
22 OSCOUT O crystal oscillator inverting amplifier output 
23 IRQ O interrupt request output: indicates an interrupt event 
24 SDA VO 12C-bus serial data line input/output2! 
NSS | SPI signal input! 
RX | UART address input!2! 
25 D1 /O test portl2l 
ADR_5 /O l2C-bus address 5 input!2! 
26 D2 /O test port 
ADR_4 | l2C-bus address 4 input!2] 
27 D3 /O test port 
ADR_3 | l2C-bus address 3 input!2! 
28 D4 /O test port 
ADR_2 | l2C-bus address 2 input!2] 
29 D5 /O test port 
ADR_1 | l2C-bus address 1 input!2! 
SCK | SPI serial clock input!2! 
DTRQ O UART request to send output to microcontroller[2! 
30 D6 /O test port 
ADR_O | l2C-bus address 0 input!2! 
MOSI /O SPI master out, slave in/2! 
MX O UART output to microcontroller!2] 
31 D7 /O test port 
SCL /O 12C-bus clock input/output!2! 
MISO /O SPI master in, slave out!2! 
TX O UART data output to microcontroller!2] 
32 EA external address input for coding |2C-bus address] 




















[1] Pin types: | = Input, O = Output, I/O = Input/Output, P = Power and G = Ground. 
[2] The pin functionality of these pins is explained in Section 8.1 “Digital interfaces”. 





[3] Connection of heatsink pad on package bottom side is not necessary. Optional connection to pin DVSS is possible. 
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8. Functional description 





The MFRC522 transmission module supports the Read/Write mode for 
ISO/IEC 14443 A/MIFARE using various transfer soeeds and modulation protocols. 


_— | MFRC522 | 
MICROCONTROLLER 


reader/writer 





i ISO/IEC 14443 A CARD 





contactless card 
001aak583 


Fig 4. MFRC522 Read/Write mode 








The physical level communication is shown in Figure 5. 





ISO/IEC 14443 A 


READER ISO/IEC 14443 A CARD 


MFRC522 
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(1) Reader to card 100 % ASK, Miller encoded, transfer speed 106 kBd to 848 kBd. 


(2) Card to reader subcarrier load modulation, Manchester encoded or BPSK, transfer speed 106 kBd 
to 848 kBd. 


ISO/IEC 14443 A/MIFARE Read/Write mode communication diagram 








Fig 5. 





The physical parameters are described in Table 4. 





























Table 4. | Communication overview for ISO/IEC 14443 A/MIFARE reader/writer 
Communication Signal type Transfer speed 
direction 106 kBd 212 kBd 424 kBd 848 kBd 
Reader to card (send __|reader side 100 % ASK 100 % ASK 100 % ASK 100 % ASK 
data from the modulation 
MFRCS22 to acard) bit encoding —s modified Miller. modified Miller. modified Miller. modified Miller 
encoding encoding encoding encoding 
bit length 128 (13.56 us) 64 (13.56 ps) 32 (13.56 us) 16 (13.56 ps) 
Card to reader card side subcarrier load subcarrier load subcarrier load subcarrier load 
(MFRC522 receives modulation modulation modulation modulation modulation 
data from a card) subcarrier 13.56MHz/16  13.56MHz/16 13.56 MHz/16 13.56 MHz/ 16 
frequency 
bit encoding Manchester BPSK BPSK BPSK 
encoding 


























MFRC522 


The MFRC522’s contactless UART and dedicated external host must manage the 
complete ISO/IEC 14443 A/MIFARE protocol. Figure 6 shows the data coding and 
framing according to ISO/IEC 14443 A/MIFARE. 
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ISO/IEC 14443 A framing at 106 kBd 
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ISO/IEC 14443 A framing at 212 kBd, 424 kBd and 848 kBd 
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| start bit is 0 


burst of 32 
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odd 
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“, &bit data 


“, &bit data | 


odd 
parity 


even 
parity 


| 


even parity at the 
end of the frame 
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Fig 6. Data coding and framing according to ISO/IEC 14443 A 








The internal CRC coprocessor calculates the CRC value based on ISO/IEC 14443 A 
part 3 and handles parity generation internally according to the transfer soeed. Automatic 
parity generation can be switched off using the MfRxReg register’s ParityDisable bit. 


8.1 Digital interfaces 


8.1.1. Automatic microcontroller interface detection 


The MFRC522 supports direct interfacing of hosts using SPI, |@C-bus or serial UART 
interfaces. The MFRC522 resets its interface and checks the current host interface type 
automatically after performing a power-on or hard reset. The MFRC522 identifies the host 


interface by sensing the logic levels on the control pins after the reset phase. This is 


done 


using a combination of fixed pin connections. Table 5 shows the different connection 



























































configurations. 
Table 5. | Connection protocol for detecting different interface types 
Pin Interface type 
UART (input) SPI (output) I2C-bus (I/O) 
SDA RX NSS SDA 
l2C 0 0 1 
EA 0 1 EA 
D7 TX MISO SCL 
D6 MX MOSI ADR_O 
D5 DTRQ SCK ADR_1 
D4 - - ADR 2 
D3 : : ADR_3 
D2 : - ADR 4 
D1 : . ADR_5 
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8.1.2 Serial Peripheral Interface 


8.1.2.1 


A serial peripheral interface (SPI compatible) is supported to enable high-speed 
communication to the host. The interface can handle data speeds up to 10 Mbit/s. When 
communicating with a host, the MFRC522 acts as a slave, receiving data from the 
external host for register settings, sending and receiving data relevant for RF interface 
communication. 


An interface compatible with SPI enables high-speed serial communication between the 
MFRC522 and a microcontroller. The implemented interface is in accordance with the SPI 
standard. 


The timing specification is given in Section 14.1 on page 78. 








MFRC522 





001 aak586 


SPI connection to host 








Fig 7. 





The MFRC522 acts as a slave during SPI communication. The SPI clock signal SCK must 
be generated by the master. Data communication from the master to the slave uses the 
MOSI line. The MISO line is used to send data from the MFRC522 to the master. 


Data bytes on both MOSI and MISO lines are sent with the MSB first. Data on both MOSI 
and MISO lines must be stable on the rising edge of the clock and can be changed on the 
falling edge. Data is provided by the MFRC522 on the falling clock edge and is stable 
during the rising clock edge. 


SPI read data 


Reading data using SPI requires the byte order shown in Table 6 to be used. It is possible 
to read out up to n-data bytes. 





The first byte sent defines both the mode and the address. 









































Table 6. | MOSI and MISO byte order 
Line Byte 0 Byte 1 Byte 2 To Byte n Byte n+ 1 
MOSI address 0 address 1 address 2 address n 00 
MISO xi] data 0 data 1 datan-1 data n 
[1] X= Do not care. 
Remark: The MSB must be sent first. 
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8.1.2.2 SPI write data 


To write data to the MFRC522 using SPI requires the byte order shown in Table 7. It is 
possible to write up to n data bytes by only sending one address byte. 


Standard performance MIFARE and NTAG frontend 


The first send byte defines both the mode and the address byte. 














Table 7. _MOSI and MISO byte order 

Line Byte 0 Byte 1 Byte 2 To Byte n Byte n+1 
MOSI address 0 data 0 data 1 data n-1 data n 
MISO xu] xu] xt] x] x] 





























8.1.2.3 


8.1.3 


8.1.3.1 


[1] X=Do not care. 
Remark: The MSB must be sent first. 


SPI address byte 
The address byte must meet the following format. 
The MSB of the first byte defines the mode used. To read data from the MFRC522 the 


MSB is set to logic 1. To write data to the MFRC522 the MSB must be set to logic 0. Bits 6 
to 1 define the address and the LSB is set to logic 0. 























Table 8. Address byte 0 register; address MOSI 

7(MSB) (6 5 4 3 2 1 0 (LSB) 
1=read address 0 

0 = write 

















UART interface 


Connection to a host 





MFRC522 


DTRQ 


MX 
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Fig 8. _UART connection to microcontrollers 





Remark: Signals DTRQ and MX can be disabled by clearing TestPinEnReg register’s 
RS232LineEn bit. 
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8.1.3.2 Selectable UART transfer speeds 
The internal UART interface is compatible with an RS232 serial interface. 
The default transfer speed is 9.6 kKBd. To change the transfer speed, the host controller 
must write a value for the new transfer speed to the SerialSpeedReg register. Bits 


BR_TO0[2:0] and BR_T1[4:0] define the factors for setting the transfer speed in the 
SerialSpeedReg register. 


The BR_TO[2:0] and BR_T1[4:0] settings are described in Table 9. Examples of different 


MFRC522 


transfer speeds and the relevant register settings are given in Table 10. 






























































Table 9. BR_TO and BR_T1 settings 

BR_Tn BitO = Bit 1 Bit 2 Bit 3 Bit 4 Bit 5 Bit 6 Bit 7 

BR_TO factor 1 fl 2 4 8 16 32 64 

BR_T1 range 1 to 32 331064 33to64 331064 331064 331064 331064 33 to 64 

Table 10. Selectable UART transfer speeds 

Transfer speed (kBd) SerialSpeedReg value Transfer speed accuracy 
Decimal Hexadecimal (%)E 

7.2 250 FAh -0.25 

9.6 235 EBh 0.32 

14.4 218 DAh 0.25 

19.2 203 CBh 0.32 

38.4 171 ABh 0.32 

57.6 154 9Ah 0.25 

115.2 122 7Ah 0.25 

128 116 74h —0.06 

230.4 90 5Ah 0.25 

460.8 58 3Ah 0.25 

921.6 28 1Ch 1.45 

1228.8 21 15h 0.32 




















[1] The resulting transfer speed error is less than 1.5 % for all described transfer speeds. 


The selectable transfer speeds shown in Table 10 are calculated according to the 


following equations: 


lf BR_TO[2:0] = 0: 


6 
27.12 x 10 
Se 1 
transfer speed (BR_TO+ 1) (1) 
If BR_TO[2:0] > 0: 
27.12 x 10° 
transfer speed = BR_T1 433 (2) 
7(BR_T0-1) 


Remark: Transfer speeds above 1228.8 kBd are not supported. 
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8.1.3.3 UART framing 














Table 11. UART framing 

Bit Length Value 
Start 1-bit 0 
Data 8 bits data 
Stop 1-bit 1 

















Remark: The LSB for data and address bytes must be sent first. No parity bit is used 
during transmission. 


Read data: To read data using the UART interface, the flow shown in Table 12 must be 
used. The first byte sent defines both the mode and the address. 











Table 12. Read data byte order 

Pin Byte 0 Byte 1 
RX (pin 24) address - 

TX (pin 31) - data 0 

















RX 
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DATA 


Reserved. 
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SO 
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D1 D2 , D3 , D4 , D5 , D6 ; D7 ; SO 
| | | | | | | | | 
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Fig 9. UART read data timing diagram 











Write data: To write data to the MFRC522 using the UART interface, the structure shown 
in Table 13 must be used. 


The first byte sent defines both the mode and the address. 
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Table 13. Write data byte order 


























Pin Byte 0 Byte 1 
RX (pin 24) address 0 data 0 
TX (pin 31) - address 0 
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Fig 10. UART write data timing diagram 
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Remark: The data byte can be sent directly after the address byte on pin RX. 


Address byte: The address byte has to meet the following format: 


The MSB of the first byte sets the mode used. To read data from the MFRC522, the MSB is set to logic 1. To write data to the 


MFRC522 the MSB is set to logic 0. Bit 6 is reserved for future use, and bits 5 to 0 define the address; see Table 14. 
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Table 14. Address byte 0 register; address MOSI 





























7(MSB) (6 5 4 3 2 1 0 (LSB) 
1 =read reserved address 
0 = write 











I2C-bus interface 


An |?C-bus (Inter-IC) interface is supported to enable a low-cost, low pin count serial bus 
interface to the host. The |2C-bus interface is implemented according to 

NXP Semiconductors’ C-bus interface specification, rev. 2.1, January 2000. The 
interface can only act in Slave mode. Therefore the MFRC522 does not implement clock 
generation or access arbitration. 





PULL-UP PULL-UP MFRC522 
NETWORK NETWORK 

it 

| 


CONFIGURATION 
WIRING 








MICROCONTROLLER 
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Fig 11. I?C-bus interface 











The MFRC522 can act either as a slave receiver or slave transmitter in Standard mode, 
Fast mode and High-speed mode. 


SDA is a bidirectional line connected to a positive supply voltage using a current source or 
a pull-up resistor. Both SDA and SCL lines are set HIGH when data is not transmitted. The 
MFRC522 has a 3-state output stage to perform the wired-AND function. Data on the 
I2C-bus can be transferred at data rates of up to 100 kBd in Standard mode, up to 

400 kBd in Fast mode or up to 3.4 Mbit/s in High-speed mode. 


If the 12?C-bus interface is selected, spike suppression is activated on lines SCL and SDA 
as defined in the I?C-bus interface specification. 


See Table 155 on page 79 for timing requirements. 
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8.1.4.1 Data validity 


Data on the SDA line must be stable during the HIGH clock period. The HIGH or LOW 
state of the data line must only change when the clock signal on SCL is LOW. 


data line change 
stable; of data 
data valid allowed mbc621 





2 
\ 

















Fig 12. Bit transfer on the I2C-bus 





8.1.4.2. START and STOP conditions 


To manage the data transfer on the I2C-bus, unique START (S) and STOP (P) conditions 
are defined. 


¢ ASTART condition is defined with a HIGH-to-LOW transition on the SDA line while 
SCL is HIGH. 


¢ ASTOP condition is defined with a LOW-to-HIGH transition on the SDA line while 
SCL is HIGH. 


The I2C-bus master always generates the START and STOP conditions. The bus is busy 
after the START condition. The bus is free again a certain time after the STOP condition. 


The bus stays busy if a repeated START (Sr) is generated instead of a STOP condition. 
The START (S) and repeated START (Sr) conditions are functionally identical. Therefore, 
S is used as a generic term to represent both the START (S) and repeated START (Sr) 
conditions. 





START condition STOP condition mbc622 





Fig 13. START and STOP conditions 








8.1.4.3 Byte format 


Each byte must be followed by an acknowledge bit. Data is transferred with the MSB first; 
see Figure 16. The number of transmitted bytes during one data transfer is unrestricted 
but must meet the read/write cycle format. 
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8.1.4.4 Acknowledge 


An acknowledge must be sent at the end of one data byte. The acknowledge-related clock 
pulse is generated by the master. The transmitter of data, either master or slave, releases 
the SDA line (HIGH) during the acknowledge clock pulse. The receiver pulls down the 
SDA line during the acknowledge clock pulse so that it remains stable LOW during the 
HIGH period of this clock pulse. 


The master can then generate either a STOP (P) condition to stop the transfer or a 
repeated START (Sr) condition to start a new transfer. 


A master-receiver indicates the end of data to the slave-transmitter by not generating an 
acknowledge on the last byte that was clocked out by the slave. The slave-transmitter 
releases the data line to allow the master to generate a STOP (P) or repeated START (Sr) 
condition. 





roo 


by transmitter oe 
not acknowledge % 


a 
data output 
by receiver 











acknowledge i 
master eid 
Ss 
i clock pulse for 
pail acknowledgement 
condition 
mbc602 


Fig 14. Acknowledge on the I2C-bus 
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SCL Ss | Sr 
or 1 2 = 7 8 9 1 2 3-8 9 or 
Sr P 
ACK ACK 
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repeated START repeated START 
condition condition 
msc608 
Fig 15. Data transfer on the I2C-bus 
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8.1.4.5 7-Bit addressing 


During the I2C-bus address procedure, the first byte after the START condition is used to 
determine which slave will be selected by the master. 


Several address numbers are reserved. During device configuration, the designer must 
ensure that collisions with these reserved addresses cannot occur. Check the /#C-bus 
specification for a complete list of reserved addresses. 


The I2C-bus address specification is dependent on the definition of pin EA. Immediately 
after releasing pin NRSTPD or after a power-on reset, the device defines the I2C-bus 
address according to pin EA. 


If pin EA is set LOW, the upper 4 bits of the device bus address are reserved by 

NXP Semiconductors and set to 0101b for all MFRC522 devices. The remaining 3 bits 
(ADR_0O, ADR_1, ADR_2) of the slave address can be freely configured by the customer 
to prevent collisions with other I2?C-bus devices. 





If pin EA is set HIGH, ADR_O to ADR_5 can be completely specified at the external pins 
according to Table 5 on page 9. ADR_6 is always set to logic 0. 





In both modes, the external address coding is latched immediately after releasing the 
reset condition. Further changes at the used pins are not taken into consideration. 
Depending on the external wiring, the I2@C-bus address pins can be used for test signal 








outputs. 
MSB LSB 
bit 6 bit 5 bit 4 bit 3 bit 2 bit 1 bit 0 
slave address 001aak591 
Fig 16. First byte following the START procedure 











8.1.4.6 Register write access 
To write data from the host controller using the 12C-bus to a specific register in the 
MFRC522 the following frame format must be used. 
¢ The first byte of a frame indicates the device address according to the I?C-bus rules. 
¢ The second byte indicates the register address followed by up to n-data bytes. 


In one frame all data bytes are written to the same register address. This enables fast 
FIFO buffer access. The Read/Write (R/W) bit is set to logic 0. 
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8.1.4.7 Register read access 


To read out data from a specific register address in the MFRC522, the host controller must 
use the following procedure: 


¢ Firstly, a write access to the specific register address must be performed as indicated 
in the frame that follows 
¢ The first byte of a frame indicates the device address according to the I2C-bus rules 
¢ The second byte indicates the register address. No data bytes are added 
¢ The Read/Write bit is 0 
After the write access, read access can start. The host sends the device address of the 
MFRC522. In response, the MFRC522 sends the content of the read access register. In 


one frame all data bytes can be read from the same register address. This enables fast 
FIFO buffer access or register polling. 


The Read/Write (R/W) bit is set to logic 1. 





oe, 





CK anttiitess OOK 0X » XC aztaseesais YL on 


Koti LOOX esis -C) 








write cycle 





read cycle 


optional, if the previous access was on the same register address 





[0:n] 








CD Kei XO OT DD 


¢ » sent by slave A acknowledge 


Fig 17. Register read and write access 








BOO 


sent by master 


S__ start condition A not acknowledge 
P stop condition W_ write cycle 
R_ read cycle 


001aak592 








MFRC522 


All information provided in this document is subject to legal disclaimers. © NXP Semiconductors N.V. 2016. All rights reserved. 





Product data sheet 
COMPANY PUBLIC 


Rev. 3.9 — 27 April 2016 
112139 20 of 95 


NXP Semiconductors MFRC522 





8.1.4.8 


8.1.4.9 


8.1.4.10 


MFRC522 


Standard performance MIFARE and NTAG frontend 


High-speed mode 


In High-speed mode (HS mode), the device can transfer information at data rates of up to 
3.4 Mbit/s, while remaining fully downward-compatible with Fast or Standard mode 
(F/S mode) for bidirectional communication in a mixed-speed bus system. 


High-speed transfer 
To achieve data rates of up to 3.4 Mbit/s the following improvements have been made to 
|2C-bus operation. 


¢ The inputs of the device in HS mode incorporate spike suppression, a Schmitt trigger 
on the SDA and SCL inputs and different timing constants when compared to 
F/S mode 


¢ The output buffers of the device in HS mode incorporate slope control of the falling 
edges of the SDA and SCL signals with different fall times compared to F/S mode 


Serial data transfer format in HS mode 
The HS mode serial data transfer format meets the Standard mode |?C-bus specification. 
HS mode can only start after all of the following conditions (all of which are in F/S mode): 
1. START condition (S) 
2. 8-bit master code (00001 XXXb) 
3. Not-acknowledge bit (A) 
When HS mode starts, the active master sends a repeated START condition (Sr) followed 


by a 7-bit slave address with a R/W bit address and receives an acknowledge bit (A) from 
the selected MFRC522. 


Data transfer continues in HS mode after the next repeated START (Sr), only switching 
back to F/S mode after a STOP condition (P). To reduce the overhead of the master code, 
a master links a number of HS mode transfers, separated by repeated START conditions 
(Sr). 





F/S mode HS mode (current-source for SCL HIGH enabled) Zz F/S mode 











—_ (n-bytes + A) = 


HS mode continues 





Sr | SLAVE ADDRESS 
001aak749 








Fig 18. I?C-bus HS mode protocol switch 
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Fig 19. I?C-bus HS mode protocol frame 
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Switching between F/S mode and HS mode 


After reset and initialization, the MFRC522 is in Fast mode (which is in effect F/S mode as 
Fast mode is downward-compatible with Standard mode). The connected MFRC522 
recognizes the “S 00001 XXX A” sequence and switches its internal circuitry from the Fast 
mode setting to the HS mode setting. 


The following actions are taken: 


1. Adapt the SDA and SCL input filters according to the spike suppression requirement 
in HS mode. 


2. Adapt the slope control of the SDA output stages. 


It is possible for system configurations that do not have other |?C-bus devices involved in 
the communication to switch to HS mode permanently. This is implemented by setting 
Status2Reg register’s I2CForceHS bit to logic 1. In permanent HS mode, the master code 
is not required to be sent. This is not defined in the specification and must only be used 
when no other devices are connected on the bus. In addition, spikes on the |2C-bus lines 
must be avoided because of the reduced spike suppression. 


MFRC522 at lower speed modes 


MFRC522 is fully downward-compatible and can be connected to an F/S mode |2C-bus 
system. The device stays in F/S mode and communicates at F/S mode speeds because a 
master code is not transmitted in this configuration. 
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Analog interface and contactless UART 


General 


The integrated contactless UART supports the external host online with framing and error 
checking of the protocol requirements up to 848 kBd. An external circuit can be connected 
to the communication interface pins MFIN and MFOUT to modulate and demodulate the 
data. 


The contactless UART handles the protocol requirements for the communication 
protocols in cooperation with the host. Protocol handling generates bit and byte-oriented 
framing. In addition, it handles error detection such as parity and CRC, based on the 
various supported contactless communication protocols. 


Remark: The size and tuning of the antenna and the power supply voltage have an 
important impact on the achievable operating distance. 


TX p-driver 


The signal on pins TX1 and TX2 is the 13.56 MHz energy carrier modulated by an 
envelope signal. It can be used to drive an antenna directly using a few passive 
components for matching and filtering; see Section 15 on page 81. The signal on pins TX1 
and TX2 can be configured using the TxControlReg register; see Section 9.3.2.5 on 


page 50. 








The modulation index can be set by adjusting the impedance of the drivers. The 
impedance of the p-driver can be configured using registers CWGsPReg and 
ModGsPReg. The impedance of the n-driver can be configured using the GSNReg 
register. The modulation index also depends on the antenna design and tuning. 


The TxModeReg and TxSelReg registers control the data rate and framing during 
transmission and the antenna driver setting to support the different requirements at the 
different modes and transfer speeds. 
































Table 15. Register and bit settings controlling the signal on pin TX1 
Bit Bit Bit Bit Envelope Pin GSPMos GSNMos |Remarks 
Tx1RFEn |Force’ |InvTx1RFOn =sInvTx1RFOff TX1 
100ASK 
0 xt] xu] xi] xt] xf) | xt) x] not specified if RF is 
switched off 
1 0 0 x] 0 RF pMod nMod 100 % ASK: pin TX1 
1 RF oCW nCW pulled to logic 0, 
independent of the 
0 1 xl 0 RF —_pMod nMod InvTx1 RFOft bit 
1 RF pCw nCWw 
1 1 xt] 0 0 pMod nMod 
1 RF_n |pCw nCcw 



































[1] X= Do not care. 
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Table 16. Register and bit settings controlling the signal on pin TX2 
Bit Bit Bit Bit Bit Envelope Pin GSPMos GSNMos |Remarks 
Tx1RFEn Force Tx2CW |InvTx2RFOn |InvTx2RFOff TX2 
100ASK 
0 xu] xt] x] xu] xu] xt) | XU x] not specified if 
RF is switched 
off 
1 0 0 0 xl] 0 RF —_pMod nMod : 
1 RF pCw nCWw 
1 x] 0 RF_n |pMod nMod 
1 RF_n |pCW nCWw 
1 0 xu] xu] RF pCWw nCw conductance 
1 xi] xt] RF_n [pcw |ncw _[always CW for 
~ the Tx2CW bit 
1 0 0 xi] 0 0 pMod nMod 100 % ASK: pin 
1 RF pCcW ncw _ | X2 pulled 
; to logic 0 
1 xt 0 0 pMod nMod (independent of 
1 RF_n |pCW nCW the 
InvTx2RFOn/Inv 
i [1] 
1 0 ae es BE POW DOW srt sits) 
1 x] xu] RF_n pCw nCWw 









































X = Do not care. 


[1] 


MFRC522 


The following abbreviations have been used in Table 15 and Table 16: 


RF: 13.56 MHz clock derived from 27.12 MHz quartz crystal oscillator divided by 2 
RF_n: inverted 13.56 MHz clock 
GSPMos: conductance, configuration of the PMOS array 


GSNMos: conductance, configuration of the NMOS array 


pCW: PMOS conductance value for continuous wave defined by the CWGsPReg 


register 


pMod: PMOS conductance value for modulation defined by the ModGsPReg register 


nCW: NMOS conductance value for continuous wave defined by the GSNReg 
register’s CWGsN[3:0] bits 


nMod: NMOS conductance value for modulation defined by the GsNReg register’s 
ModGsN[3:0] bits 


X = do not care. 


Remark: If only one driver is switched on, the values for CWGsPReg, ModGsPReg and 


GsNReg registers are used for both drivers. 


All information provided in this document is subject to legal disclaimers. 


© NXP Semiconductors N.V. 2016. All rights reserved. 





Product data sheet 
COMPANY PUBLIC 


Rev. 3.9 — 27 April 2016 
112139 


25 of 95 


NXP Semiconductors MFRC522 





8.2.3 


8.2.4 


MFRC522 


Standard performance MIFARE and NTAG frontend 


Serial data switch 


Two main blocks are implemented in the MFRC522. The digital block comprises the state 
machines, encoder/decoder logic. The analog block comprises the modulator and 
antenna drivers, the receiver and amplifiers. It is possible for the interface between these 
two blocks to be configured so that the interfacing signals are routed to pins MFIN and 
MFOUT. 


This topology allows the analog block of the MFRC522 to be connected to the digital block 
of another device. 


The serial signal switch is controlled by the TxSelReg and RxSelReg registers. 


Figure 20 shows the serial data switch for p-driver TX1 and TX2. 





DriverSel[1 :0] 





3-state 














INVERT IF 
InvMod = 1 


envelope 


to driver TX1 and TX2 
0 = impedance = modulated 


INTERNAL 
CODER 
1 = impedance = CW 
INVERT IF 
Me PoIMFin = 0 
001aak593 


Fig 20. Serial data switch for p-driver TX1 and TX2 

















MFIN and MFOUT interface support 


The MFRC522 is divided into a digital circuit block and an analog circuit block. The digital 
block contains state machines, encoder and decoder logic and so on. The analog block 
contains the modulator and antenna drivers, receiver and amplifiers. The interface 
between these two blocks can be configured so that the interfacing signals can be routed 
to pins MFIN and MFOUT; see Figure 21 on page 28. This configuration is implemented 
using TxSelReg register’s MFOutSel[3:0] and DriverSel[1:0] bits and RxSelReg register’s 
UARTSel[1:0] bits. 





This topology allows some parts of the analog block to be connected to the digital block of 
another device. 


Switch MFOutSel in the TxSelReg register can be used to measure MIFARE and 
ISO/IEC14443 A related signals. This is especially important during the design-in phase 
or for test purposes as it enables checking of the transmitted and received data. 


The most important use of pins MFIN and MFOUT is found in the active antenna concept. 
An external active antenna circuit can be connected to the MFRC522’s digital block. 
Switch MFOutSel must be configured so that the internal Miller encoded signal is sent to 
pin MFOUT (MFOutSel = 100b). UARTSel[1:0] must be configured to receive a 
Manchester signal with subcarrier from pin MFIN (UARTSel[1 :0] = 01). 


It is possible to connect a passive antenna to pins TX1, TX2 and RX (using the 
appropriate filter and matching circuit) and an active antenna to pins MFOUT and MFIN at 
the same time. In this configuration, two RF circuits can be driven (one after another) by a 
single host processor. 
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Remark: Pins MFIN and MFOUT have a dedicated supply on pin SVDD with the ground 
on pin PVSS. If pin MFIN is not used it must be connected to either pin SVDD or pin 
PVSS. If pin SVDD is not used it must be connected to either pin DVDD, pin PVDD or any 


other voltage supply pin. 
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Fig 21. Overview of MFIN and MFOUT signal routing 
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CRC coprocessor 
The following CRC coprocessor parameters can be configured: 
¢ The CRC preset value can be either 0000h, 6363h, A671h or FFFFh depending on 
the ModeReg register’s CRCPreset[1:0] bits setting 
* The CRC polynomial for the 16-bit CRC is fixed to x16 + x12 + x54 1 


¢ The CRCResultReg register indicates the result of the CRC calculation. This register 
is split into two 8-bit registers representing the higher and lower bytes. 


¢ The ModeReg register’s MSBFirst bit indicates that data will be loaded with the MSB 
first. 


Table 17. CRC coprocessor parameters 























Parameter Value 

CRC register length 16-bit CRC 

CRC algorithm algorithm according to ISO/IEC 14443 A and ITU-T 

CRC preset value 0000h, 6363h, A671h or FFFFh depending on the setting of the 
ModeReg register’s CRCPreset[1:0] bits 





FIFO buffer 


An 8 x 64 bit FIFO buffer is used in the MFRC522. It buffers the input and output data 
stream between the host and the MFRC522’s internal state machine. This makes it 
possible to manage data streams up to 64 bytes long without the need to take timing 
constraints into account. 


Accessing the FIFO buffer 


The FIFO buffer input and output data bus is connected to the FiFODataReg register. 
Writing to this register stores one byte in the FIFO buffer and increments the internal FIFO 
buffer write pointer. Reading from this register shows the FIFO buffer contents stored in 
the FIFO buffer read pointer and decrements the FIFO buffer read pointer. The distance 
between the write and read pointer can be obtained by reading the FIFOLevelReg 
register. 


When the microcontroller starts a command, the MFRC522 can, while the command is in 
progress, access the FIFO buffer according to that command. Only one FIFO buffer has 
been implemented which can be used for input and output. The microcontroller must 
ensure that there are not any unintentional FIFO buffer accesses. 


Controlling the FIFO buffer 
The FIFO buffer pointers can be reset by setting FIFOLevelReg register’s FlushBuffer bit 
to logic 1. Consequently, the FIFOLevel[6:0] bits are all set to logic 0 and the ErrorReg 
register’s BufferOvil bit is cleared. The bytes stored in the FIFO buffer are no longer 
accessible allowing the FIFO buffer to be filled with another 64 bytes. 
FIFO buffer status information 
The host can get the following FIFO buffer status information: 
¢ Number of bytes stored in the FIFO buffer: FiIFOLevelReg register’s FIFOLevel[6:0] 
¢ FIFO buffer almost full warning: Status1Reg register’s HiAlert bit 
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¢ FIFO buffer almost empty warning: Status1Reg register’s LoAlert bit 


e FIFO buffer overflow warning: ErrorReg register’s BufferOvfl bit. The BufferOvfl bit 
can only be cleared by setting the FiFOLevelReg register’s FlushBuffer bit. 


The MFRC522 can generate an interrupt signal when: 


¢« ComlEnReg register’s LoAlertlEn bit is set to logic 1. It activates pin IRQ when 
Status1 Reg register’s LoAlert bit changes to logic 1. 


¢ ComlEnReg register’s HiAlertlEn bit is set to logic 1. It activates pin IRQ when 
Status1 Reg register’s HiAlert bit changes to logic 1. 


If the maximum number of WaterLevel bytes (as set in the WaterLevelReg register) or less 
are stored in the FIFO buffer, the HiAlert bit is set to logic 1. It is generated according to 


Equation 3: 


HiAlert = (64-—FIFOLength) < WaterLevel (3) 


If the number of WaterLevel bytes (as set in the WaterLevelReg register) or less are 
stored in the FIFO buffer, the LoAlert bit is set to logic 1. It is generated according to 


Equation 4: 


LoAlert = FIFOLength < WaterLevel (4) 


Interrupt request system 


The MFRC522 indicates certain events by setting the Status1Reg register’s IRq bit and, if 
activated, by pin IRQ. The signal on pin IRQ can be used to interrupt the host using its 
interrupt handling capabilities. This allows the implementation of efficient host software. 


Interrupt sources overview 


Table 18 shows the available interrupt bits, the corresponding source and the condition for 
its activation. The ComirqReg register’s TimerlRq interrupt bit indicates an interrupt set by 
the timer unit which is set when the timer decrements from 1 to 0. 


The ComIrqReg register’s TxIRq bit indicates that the transmitter has finished. If the state 
changes from sending data to transmitting the end of the frame pattern, the transmitter 
unit automatically sets the interrupt bit. The CRC coprocessor sets the DivirqReg 
register’s CRCIRq bit after processing all the FIFO buffer data which is indicated by 
CRCReady bit = 1. 


The ComIrqReg register’s RxIRq bit indicates an interrupt when the end of the received 
data is detected. The ComirqReg register’s IdlelRq bit is set if a command finishes and 
the Command[3:0] value in the CommandReg register changes to idle (see Table 149 on 
page 70). 


The ComIrqReg register’s HiAlertIRq bit is set to logic 1 when the Status1Reg register’s 
HiAlert bit is set to logic 1 which means that the FIFO buffer has reached the level 
indicated by the WaterLevel[5:0] bits. 


The ComIrqReg register’s LoAlertIRq bit is set to logic 1 when the Status1Reg register’s 
LoAlert bit is set to logic 1 which means that the FIFO buffer has reached the level 
indicated by the WaterLevel[5:0] bits. 
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The ComlrqReg register’s ErrlRq bit indicates an error detected by the contactless UART 
during send or receive. This is indicated when any bit is set to logic 1 in register ErrorReg. 


Table 18. Interrupt sources 












































Interrupt flag |Interrupt source Trigger action 

IRq timer unit the timer counts from 1 to 0 

TxIRq transmitter a transmitted data stream ends 

CRCIRq CRC coprocessor all data from the FIFO buffer has been processed 
RxIRq receiver a received data stream ends 

IdlelRq ComlrqReg register |command execution finishes 

HiAlertiRq FIFO buffer the FIFO buffer is almost full 

LoAlertIRq FIFO buffer the FIFO buffer is almost empty 

ErrlRq contactless UART an error is detected 

Timer unit 


The MFRC522A has a timer unit which the external host can use to manage timing tasks. 
The timer unit can be used in one of the following timer/counter configurations: 

¢ Timeout counter 

¢ Watchdog counter 

* Stop watch 

¢ Programmable one shot 

¢ Periodical trigger 
The timer unit can be used to measure the time interval between two events or to indicate 
that a specific event occurred after a specific time. The timer can be triggered by events 
explained in the paragraphs below. The timer does not influence any internal events, for 


example, a time-out during data reception does not automatically influence the reception 
process. Furthermore, several timer-related bits can be used to generate an interrupt. 


The timer has an input clock of 13.56 MHz derived from the 27.12 MHz quartz crystal 
oscillator. The timer consists of two stages: prescaler and counter. 


The prescaler (TPrescaler) is a 12-bit counter. The reload values (TReloadVal_Hi[7:0] and 
TReloadVal_Lo[7:0]) for TPrescaler can be set between 0 and 4095 in the TModeReg 
register’s TPrescaler_Hi[3:0] bits and TPrescalerReg register’s TPrescaler_Lo[7:0] bits. 


The reload value for the counter is defined by 16 bits between 0 and 65535 in the 
TReloadReg register. 


The current value of the timer is indicated in the TCounterValReg register. 


When the counter reaches 0, an interrupt is automatically generated, indicated by the 
ComirqReg register’s TimerIRq bit setting. If enabled, this event can be indicated on 
pin IRQ. The TimerlRq bit can be set and reset by the host. Depending on the 
configuration, the timer will stop at 0 or restart with the value set in the TReloadReg 
register. 


The timer status is indicated by the Status1Reg register’s TRunning bit. 
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The timer can be started manually using the ControlReg register’s TStartNow bit and 
stopped using the ControlReg register’s TStopNow bit. 


The timer can also be activated automatically to meet any dedicated protocol 
requirements by setting the TModeReg register’s TAuto bit to logic 1. 


The delay time of a timer stage is set by the reload value + 1. The total delay time (tg1) is 
calculated using Equation 5: 


_ (TPrescaler x 2 + 1) x (TReloadVal + 1) (5) 
ahr. 13.56 MHz 


t 
An example of calculating total delay time (tg) is shown in Equation 6, where the 
TPrescaler value = 4095 and TReloadVal = 65535: 


_ (4095 x 2+ 1) x (65535 +1) 
ioe 73.56 MHz ©) 


Example: To give a delay time of 25 us requires 339 clock cycles to be counted and a 
TPrescaler value of 169. This configures the timer to count up to 65535 time-slots for 
every 25 us period. 


The MFRC522 version 2.0 offers in addition a second prescaler timer. Due to the fact that 
the prescaler counts down to 0 the prescaler period always count an odd number of 
clocks (1, 3, 5, ..). This may lead to inaccuracy. The second available prescaler timer 
implements the possibility to change the prescaler reload value to odd numbers, which 
results in an even prescaler period. This new prescaler can be enabled only in version 2.0 
using the register bit DemodeReg, see Table 72. Within this option, the total delay time 
(tg2) is calculated using Equation 5: 


ae (TPrescaler x 2 + 2) x (TReloadVal + 1) (7) 
fas 13.56 MHz 
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Power reduction modes 


Hard power-down 


Hard power-down is enabled when pin NRSTPD is LOW. This turns off all internal current 
sinks including the oscillator. All digital input buffers are separated from the input pins and 
clamped internally (except pin NRSTPD). The output pins are frozen at either a HIGH or 
LOW level. 


Soft power-down mode 


Soft Power-down mode is entered immediately after the CommandReg register’s 
PowerDown bit is set to logic 1. All internal current sinks are switched off, including the 
oscillator buffer. However, the digital input buffers are not separated from the input pins 
and keep their functionality. The digital output pins do not change their state. 


During soft power-down, all register values, the FIFO buffer content and the configuration 
keep their current contents. 


After setting the PowerDown bit to logic 0, it takes 1024 clocks until the Soft power-down 
mode is exited indicated by the PowerDown bit. Setting it to logic 0 does not immediately 
clear it. It is cleared automatically by the MFRC522 when Soft power-down mode is 
exited. 


Remark: If the internal oscillator is used, you must take into account that it is supplied by 
pin AVDD and it will take a certain time (tog¢) until the oscillator is stable and the clock 
cycles can be detected by the internal logic. It is recommended for the serial UART, to first 
send the value 55h to the MFRC522. The oscillator must be stable for further access to 
the registers. To ensure this, perform a read access to address 0 until the MFRC522 
answers to the last read command with the register content of address 0. This indicates 
that the MFRC522 is ready. 


Transmitter power-down mode 


The Transmitter Power-down mode switches off the internal antenna drivers thereby, 
turning off the RF field. Transmitter power-down mode is entered by setting either the 
TxControlReg register’s Tx1RFEn bit or Tx2RFEn bit to logic 0. 


Oscillator circuit 





MFRC522 











OSCIN 





OSCOUT 





27.12 MHz 


a i 


001aak595 








Fig 22. Quartz crystal connection 
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The clock applied to the MFRC522 provides a time basis for the synchronous system’s 
encoder and decoder. The stability of the clock frequency, therefore, is an important factor 
for correct operation. To obtain optimum performance, clock jitter must be reduced as 
much as possible. This is best achieved using the internal oscillator buffer with the 
recommended circuitry. 


If an external clock source is used, the clock signal must be applied to pin OSCIN. In this 
case, special care must be taken with the clock duty cycle and clock jitter and the clock 
quality must be verified. 


Reset and oscillator start-up time 


Reset timing requirements 


The reset signal is filtered by a hysteresis circuit and a spike filter before it enters the 
digital circuit. The spike filter rejects signals shorter than 10 ns. In order to perform a reset, 
the signal must be LOW for at least 100 ns. 


Oscillator start-up time 


If the MFRC522 has been set to a Power-down mode or is powered by a Vppx supply, the 
start-up time for the MFRC522 depends on the oscillator used and is shown in Figure 23. 


The time (tstartup) is the start-up time of the crystal oscillator circuit. The crystal oscillator 
start-up time is defined by the crystal. 


The time (tg) is the internal delay time of the MFRC522 when the clock signal is stable 
before the MFRC522 can be addressed. 


The delay time is calculated by: 


1024 


= = 37.74 
d ~ 27 Ls (8) 


The time (togc) is the sum of tg and tgtartup- 





device activation | 
oscillator | 


























clock stable | 

clock ready eee CO-—:t—“‘“‘“O™OS 
t 
a startup ! ta 
tose 

+ La 
a 
001aak596 

Fig 23. Oscillator start-up time 
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9. MFRC522 registers 





9.1 Register bit behavior 


Depending on the functionality of a register, the access conditions to the register can vary. 
In principle, bits with same behavior are grouped in common registers. The access 
conditions are described in Table 19. 


Table 19. Behavior of register bits and their designation 





Abbreviation |Behavior Description 





R/W read and write | These bits can be written and read by the microcontroller. Since 
they are used only for control purposes, their content is not 
influenced by internal state machines, for example the 
ComlEnReg register can be written and read by the 
microcontroller. It will also be read by internal state machines but 
never changed by them. 





D dynamic These bits can be written and read by the microcontroller. 
Nevertheless, they can also be written automatically by internal 
state machines, for example the CommandReg register changes 
its value automatically after the execution of the command. 





R read only These register bits hold values which are determined by internal 
states only, for example the CRCReady bit cannot be written 
externally but shows internal states. 





W write only Reading these register bits always returns zero. 





reserved - These registers are reserved for future use and must not be 
changed. In case of a write access, it is recommended to always 
write the value “O”. 





RFT - These register bits are reserved for future use or are for 
production tests and must not be changed. 
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9.2 Register overview 





Table 20. MFRC522 register overview 
Address _ (Register name Function Refer to 
(hex) 





Page 0: Command and status 































































































00h Reserved reserved for future use Table 21 on page 38 
Oth CommandReg starts and stops command execution Table 23 on page 38 
02h ComlEnReg enable and disable interrupt request control bits Table 25 on page 38 
03h DiviEnReg enable and disable interrupt request control bits Table 27 on page 39 
04h ComlrqReg interrupt request bits Table 29 on page 39 
O5h DivirqReg interrupt request bits Table 31 on page 40 
06h ErrorReg error bits showing the error status of the last command Table 33 on page 41 
executed 
07h Status1Reg communication status bits Table 35 on page 42 
08h Status2Reg receiver and transmitter status bits Table 37 on page 43 
09h FIFODataReg input and output of 64 byte FIFO buffer Table 39 on page 44 
OAh FIFOLevelReg number of bytes stored in the FIFO buffer Table 41 on page 44 
OBh WaterLevelReg level for FIFO underflow and overflow warning Table 43 on page 44 
O0Ch ControlReg miscellaneous control registers Table 45 on page 45 
ODh BitFramingReg adjustments for bit-oriented frames Table 47 on page 46 
OEh CollReg bit position of the first bit-collision detected on the RF Table 49 on page 46 
interface 
OFh Reserved reserved for future use Table 51 on page 47 








Page 1: Command 































































































10h Reserved reserved for future use Table 53 on page 47 
1th ModeReg defines general modes for transmitting and receiving Table 55 on page 48 
12h TxModeReg defines transmission data rate and framing Table 57 on page 48 
13h RxModeReg defines reception data rate and framing Table 59 on page 49 
14h TxControlReg controls the logical behavior of the antenna driver pins TX1 |Table 61 on page 50 
and TX2 
15h TxASKReg controls the setting of the transmission modulation Table 63 on page 51 
16h TxSelReg selects the internal sources for the antenna driver Table 65 on page 51 
17h RxSelReg selects internal receiver settings Table 67 on page 52 
18h RxThresholdReg selects thresholds for the bit decoder Table 69 on page 53 
19h DemodReg defines demodulator settings Table 71 on page 53 
1Ah Reserved reserved for future use Table 73 on page 54 
1Bh Reserved reserved for future use Table 75 on page 54 
1Ch MfTxReg controls some MIFARE communication transmit parameters Table 77 on page 55 
1Dh MfRxReg controls some MIFARE communication receive parameters |Table 79 on page 55 
1Eh Reserved reserved for future use Table 81 on page 55 
1Fh SerialSpeedReg selects the speed of the serial UART interface Table 83 on page 55 








Page 2: Configuration 








20h 





Reserved 





reserved for future use 





Table 85 on page 57 
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Table 20. MFRC522 register overview ...continued 














































































































































































































Address __|Register name Function Refer to 
(hex) 
2th CRCResultReg shows the MSB and LSB values of the CRC calculation Table 87 on page 57 
22h Table 89 on page 57 
23h Reserved reserved for future use Table 91 on page 58 
24h ModWidthReg controls the ModWidth setting Table 93 on page 58 
25h Reserved reserved for future use Table 95 on page 58 
26h RFCfgReg configures the receiver gain Table 97 on page 59 
27h GsNReg selects the conductance of the antenna driver pins TX1 and |Table 99 on page 59 
TX2 for modulation 
28h CWGsPReg defines the conductance of the p-driver output during Table 101 on page 60 
periods of no modulation 
29h ModGsPReg defines the conductance of the p-driver output during Table 103 on page 60 
periods of modulation 
2Ah TModeReg defines settings for the internal timer Table 105 on page 60 
2Bh TPrescalerReg Table 107 on page 61 
2Ch TReloadReg defines the 16-bit timer reload value Table 109 on page 62 
2Dh Table 111 on page 62 
2Eh TCounterValReg shows the 16-bit timer value Table 113 on page 63 
2Fh Table 115 on page 63 
Page 3: Test register 
30h Reserved reserved for future use Table 117 on page 63 
31h TestSel1 Reg general test signal configuration Table 119 on page 63 
32h TestSel2Reg general test signal configuration and PRBS control Table 121 on page 64 
33h TestPinEnReg enables pin output driver on pins D1 to D7 Table 123 on page 64 
34h TestPinValueReg defines the values for D1 to D7 when it is used as an I/O bus Table 125 on page 65 
35h TestBusReg shows the status of the internal test bus Table 127 on page 65 
36h AutoTestReg controls the digital self test Table 129 on page 66 
37h VersionReg shows the software version Table 131 on page 66 
38h AnalogTestReg controls the pins AUX1 and AUX2 Table 133 on page 67 
39h TestDAC1 Reg defines the test value for TestDAC1 Table 135 on page 68 
3Ah TestDAC2Reg defines the test value for TestDAC2 Table 137 on page 68 
3Bh TestADCReg shows the value of ADC | and Q channels Table 139 on page 68 
3Ch to 3Fh |/Reserved reserved for production tests Table 141 to Table 147 
on page 69 
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9.3 Register descriptions 


9.3.1 


9.3.1.1 


9.3.1.2 


9.3.1.3 


Page 0: Command and status 


Reserved register 00h 
Functionality is reserved for future use. 


Table 21. Reserved register (address 00h); reset value: 00h bit allocation 

Bit 7 6 5 4 3 2 1 0 
Symbol reserved 

Access - 












































Table 22. Reserved register bit descriptions 
Bit Symbol Description 




















7to0 - reserved 





CommandReg register 
Starts and stops command execution. 


Table 23. CommandReg register (address 01h); reset value: 20h bit allocation 



































Bit 7 6 5 4 3 2 1 0 
Symbol: reserved RevOff © PowerDown Command[3:0] 
Access: - R/W D D 











Table 24. CommandReg register bit descriptions 

















Bit Symbol Value Description 
7 to 6 |reserved - reserved for future use 
5 RevOff 1 analog part of the receiver is switched off 
4 PowerDown 1 Soft power-down mode entered 
0 MFRC522 starts the wake up procedure during which this bit is 


read as a logic 1; it is read as a logic 0 when the MFRC522 is 
ready; see Section 8.6.2 on page 33 


Remark: The PowerDown bit cannot be set when the SoftReset 
command is activated 








3 to 0 |Command[3:0] activates a command based on the Command value; reading this 
register shows which command is executed; see Section 10.3 on 


page 70 




















ComlEnReg register 
Control bits to enable and disable the passing of interrupt requests. 


Table 25. ComlEnReg register (address 02h); reset value: 80h bit allocation 



































Bit 7 6 5 | 4 | 38 2 1 0 

Symbol IRqinv TxIEn RxlEn — IdlelEn_ HiAlertIEn LoAlertlEn = ErrlEn  TimerlEn 

Access R/W R/W R/W R/W R/W R/W R/W R/W 
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Table 26. ComlEnReg register bit descriptions 





Bit Symbol Value |Description 








7 |IRqlnv 1 signal on pin IRQ is inverted with respect to the Status1Reg register’s 
IRq bit 
0 signal on pin IRQ is equal to the IRq bit; in combination with the 


DivlEnReg register’s IRqPushPull bit, the default value of logic 1 ensures 
that the output level on pin IRQ is 3-state 























6  TxlIEn - allows the transmitter interrupt request (TxIRq bit) to be propagated to 
pin IRQ 

5 | RxlEn - allows the receiver interrupt request (RxIRq bit) to be propagated to pin 
IRQ 

IdlelEn - allows the idle interrupt request (IdlelRq bit) to be propagated to pin IRQ 

3. HiAlertlEn |- allows the high alert interrupt request (HiAlertIRq bit) to be propagated to 
pin IRQ 

2  LoAlertlEn |- allows the low alert interrupt request (LoAlertlRq bit) to be propagated to 
pin IRQ 

1 |ErrlEn - allows the error interrupt request (ErrlRq bit) to be propagated to pin IRQ 

0 TimerlEn  |- allows the timer interrupt request (TimerlRq bit) to be propagated to pin 

















IRQ 





DivlEnReg register 
Control bits to enable and disable the passing of interrupt requests. 


Table 27. DiviEnReg register (address 03h); reset value: 00h bit allocation 











Bit 7 ess | 3 D | 1 | 0 
Symbol IRQPushPull reserved MfinActlEn — reserved CRCIEn reserved 
Access R/W - R/W - R/W - 











Table 28. DiviEnReg register bit descriptions 























Bit Symbol Value |Description 
7 IRQPushPull | 1 pin IRQ is a standard CMOS output pin 
0 pin IRQ is an open-drain output pin 
6 to 5 |reserved - reserved for future use 
4 MfinActlEn - allows the MFIN active interrupt request to be propagated to 
pin IRQ 
3 reserved - reserved for future use 
2 CRCIEn - allows the CRC interrupt request, indicated by the DivIirqReg 


register’s CRCIRq bit, to be propagated to pin IRQ 




















1 to 0 reserved - reserved for future use 





ComirqReg register 
Interrupt request bits. 


Table 29. ComirqReg register (address 04h); reset value: 14h bit allocation 












































Bit 7 6 5 4 3 2 1 0 
Symbol Set1 TxlIRq RxIRq_ IdlelRq  HiAlertIRq  LoAlertIRq ErrlRq TimerlRq 
Access Ww D D D D D D D 
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Table 30. ComlirqReg register bit descriptions 
All bits in the ComirqReg register are cleared by software. 





Bit |Symbol Value |Description 





7 |Set1 1 indicates that the marked bits in the ComlrqReg register are set 





indicates that the marked bits in the ComlrqReg register are cleared 








0 
6 |TxIRq 1 set immediately after the last bit of the transmitted data was sent out 
5 |RxiRq 1 receiver has detected the end of a valid data stream 


if the RxModeReg register’s RxNoErr bit is set to logic 1, the RxIRq bit is 
only set to logic 1 when data bytes are available in the FIFO 





4 |IdlelRq 


=e 


If acommand terminates, for example, when the CommandReg changes 
its value from any command to the Idle command (see Table 149 on 
page 70) 

if an unknown command is started, the CommandReg register 
Command[3:0] value changes to the idle state and the IdlelRq bit is set 
The microcontroller starting the Idle command does not set the IdlelRq 
bit 

the Status1Reg register’s HiAlert bit is set 

in opposition to the HiAlert bit, the HiAlertlRq bit stores this event and 
can only be reset as indicated by the Set1 bit in this register 





3 /HiAlertiRq 


=e 





2 |LoAlertIRq 


=e 


Status1Reg register’s LoAlert bit is set 


in opposition to the LoAlert bit, the LoAlertIRq bit stores this event and 
can only be reset as indicated by the Set1 bit in this register 





ErrlRq 
0 = TimerlRq 


=e 


any error bit in the ErrorReg register is set 




















=e 


the timer decrements the timer value in register TCounterValReg to zero 





DivirqReg register 
Interrupt request bits. 


Table 31. DivirqReg register (address 05h); reset value: xOh bit allocation 



































Bit 7 6 5 4 3 2 1 0 
Symbol Set2 reserved MfinActIRq reserved CRCIRq reserved 
Access W - D - D - 











Table 32. DivirqReg register bit descriptions 
All bits in the DivirqReg register are cleared by software. 





Bit Symbol Value |Description 




















7 Set2 1 indicates that the marked bits in the DivIrqReg register are set 
0 indicates that the marked bits in the DivIlrqReg register are cleared 
6to5 |reserved _- reserved for future use 
4 MfinActIRq | 1 MFIN is active 
this interrupt is set when either a rising or falling signal edge is 
detected 
3 reserved - reserved for future use 
2 CRCIRq 1 the CalcCRC command is active and all data is processed 





1 to O |reserved reserved for future use 
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9.3.1.7 ErrorReg register 


MFRC522 


Error bit register showing the error status of the last command executed. 




































































Table 33. ErrorReg register (address 06h); reset value: 00h bit allocation 

Bit 7 6 5 4 3 2 1 0 

Symbol WrErr TempErr reserved BufferOvfl CollErr CRCErr ParityErr ProtocolErr 

Access R R - R R R R R 

Table 34. ErrorReg register bit descriptions 

Bit |Symbol Value |Description 

7 |WrErr 1 data is written into the FIFO buffer by the host during the MFAuthent 
command or if data is written into the FIFO buffer by the host during the 
time between sending the last bit on the RF interface and receiving the 
last bit on the RF interface 

6 |TempErrll 4 internal temperature sensor detects overheating, in which case the 
antenna drivers are automatically switched off 

reserved - reserved for future use 
BufferOvfl 1 the host or a MFRC522’s internal state machine (e.g. receiver) tries to 

write data to the FIFO buffer even though it is already full 

3 |CollErr 1 a bit-collision is detected 
cleared automatically at receiver start-up phase 
only valid during the bitwise anticollision at 106 kBd 
always set to logic 0 during communication protocols at 212 kBd, 
424 kBd and 848 kBd 

2 /CRCErr 1 the RxModeReg register’s RxCRCEn bit is set and the CRC calculation 
fails 
automatically cleared to logic 0 during receiver start-up phase 

1 ‘| ParityErr 1 parity check failed 
automatically cleared during receiver start-up phase 
only valid for ISO/IEC 14443 A/MIFARE communication at 106 kBd 

0 |ProtocolErr |1 set to logic 1 if the SOF is incorrect 
automatically cleared during receiver start-up phase 
bit is only valid for 106 kBd 
during the MFAuthent command, the ProtocolErr bit is set to logic 1 if the 
number of bytes received in one data stream is incorrect 




















[1] 


Command execution clears all error bits except the TempErr bit. Cannot be set by software. 
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9.3.1.8 Statusi1Reg register 
Contains status bits of the CRC, interrupt and FIFO buffer. 


Table 35. StatusiReg register (address 07h); reset value: 21h bit allocation 






































Bit 7 6 5 4 3 2 1 0 
Symbol reserved CRCOk CRCReady IRq TRunning reserved HiAlert  LoAlert 
Access - R R R R - R R 





Table 36. Statusi1Reg register bit descriptions 





Bit 


Symbol 


Value Description 





t 


reserved 


reserved for future use 





6 


CRCOk 


1 the CRC result is zero 

for data transmission and reception, the CRCOk bit is undefined: use the 
ErrorReg register’s CRCErr bit 

indicates the status of the CRC coprocessor, during calculation the value 
changes to logic 0, when the calculation is done correctly the value 
changes to logic 1 





CRCReady 


=e 


the CRC calculation has finished 


only valid for the CRC coprocessor calculation using the CalcCRC 
command 





IRq 


- indicates if any interrupt source requests attention with respect to the 
setting of the interrupt enable bits: see the ComlEnReg and DivlEnReg 
registers 





TRunning 


=e 


MFRC522’s timer unit is running, i.e. the timer will decrement the 
TCounterValReg register with the next timer clock 

Remark: in gated mode, the TRunning bit is set to logic 1 when the 
timer is enabled by TModeReg register’s TGated[1:0] bits; this bit is not 
influenced by the gated signal 





reserved 


reserved for future use 





HiAlert 


— 


the number of bytes stored in the FIFO buffer corresponds to equation: 
HiAlert = (64-—FIFOLength) < WaterLevel 


example: 
FIFO length = 60, WaterLevel = 4 > HiAlert = 1 
FIFO length = 59, WaterLevel = 4 > HiAlert = 0 











LoAlert 


1 the number of bytes stored in the FIFO buffer corresponds to equation: 
LoAlert = FIFOLength < WaterLevel 


example: 
FIFO length = 4, WaterLevel = 4 > LoAlert = 1 
FIFO length = 5, WaterLevel = 4 > LoAlert = 0 
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9.3.1.9 Status2Reg register 


Contains status bits of the receiver, transmitter and data mode detector. 


Table 37. Status2Reg register (address 08h); reset value: 00h bit allocation 



































Bit 7 6 5 4 3 2 1 0 
Symbol TempSensClear |@CForceHS reserved MFCrypto10On ModemState[2:0] 
Access R/W R/W - D R 











Table 38. Status2Reg register bit descriptions 























Bit Symbol Value Description 
7 TempSensClear 1 clears the temperature error if the temperature is below the 
alarm limit of 125 °C 
6 I@CForceHS 12C-bus input filter settings: 
1 the |2C-bus input filter is set to the High-speed mode 
independent of the I2C-bus protocol 
0 the I2C-bus input filter is set to the I2C-bus protocol used 
5to4 |reserved - reserved 
3 MFCrypto1On - indicates that the MIFARE Crypto1 unit is switched on and 


therefore all data communication with the card is encrypted 


can only be set to logic 1 by a successful execution of the 
MFAuthent command 


only valid in Read/Write mode for MIFARE standard cards 
this bit is cleared by software 





2to0 ModemState[2:0] - shows the state of the transmitter and receiver state 
machines: 
000 idle 
001 wait for the BitFramingReg register’s StartSend bit 
010 TxWait: wait until RF field is present if the TModeReg 


register’s TxWaitRF bit is set to logic 1 
the minimum time for TxWait is defined by the TxWaitReg 


register 
011 transmitting 
100 RxWait: wait until RF field is present if the TModeReg 


register’s TxWaitRF bit is set to logic 1 


the minimum time for RxWait is defined by the 
RxWaitReg register 























101 wait for data 

110 receiving 
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9.3.1.10 FIFODataReg register 
Input and output of 64 byte FIFO buffer. 


Table 39. FIFODataReg register (address 09h); reset value: xxh bit allocation 



































Bit 7 6 5 4 3 2 1 0 
Symbol FIFOData[7:0] 
Access D 











Table 40. FIFODataReg register bit descriptions 
Bit Symbol Description 
7to0 FIFOData[7:0] |data input and output port for the internal 64-byte FIFO buffer 


FIFO buffer acts as parallel in/parallel out converter for all serial data 
stream inputs and outputs 























9.3.1.11 FlFOLevelReg register 
Indicates the number of bytes stored in the FIFO. 


Table 41. FiFOLevelReg register (address 0Ah); reset value: 00h bit allocation 



































Bit 7 6 5 4 3 2 1 0 
Symbol — FlushBuffer FIFOLevel[6:0] 
Access W R 











Table 42. FiFOLevelReg register bit descriptions 





Bit (Symbol Value Description 





7 FlushBuffer | 1 immediately clears the internal FIFO buffer’s read and write pointer 
and ErrorReg register’s BufferOvfl bit 


reading this bit always returns 0 


6 to 0 |FIFOLevel |- indicates the number of bytes stored in the FIFO buffer 
[6:0] 





writing to the FIFODataReg register increments and reading 
decrements the FIFOLevel value 




















9.3.1.12 WaterLevelReg register 
Defines the level for FIFO under- and overflow warning. 


Table 43. WaterLevelReg register (address OBh); reset value: 08h bit allocation 















































Bit 7 6 5 4 3 2 1 0 
Symbol reserved WaterLevel[5:0] 
Access - R/W 
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WaterLevelReg register bit descriptions 





Description 





reserved for future use 





Table 44. 

Bit Symbol 

7to6 reserved 

5to0 WaterLevel 
[5:0] 











defines a warning level to indicate a FIFO buffer overflow or underflow: 


Status1Reg register’s HiAlert bit is set to logic 1 if the remaining 
number of bytes in the FIFO buffer space is equal to, or less than the 
defined number of WaterLevel bytes 


Status1Reg register’s LoAlert bit is set to logic 1 if equal to, or less 
than the WaterLevel bytes in the FIFO buffer 


Remark: to calculate values for HiAlert and LoAlert see 
Section 9.3.1.8 on page 42. 











9.3.1.13 ControlReg register 


Miscellaneous control bits. 


Table 45. ConitrolReg register (address 0Ch); reset value: 10h bit allocation 







































































Bit 7 6 5 4 3 2 1 0 
Symbol TStopNow TStartNow reserved RxLastBits[2:0] 
Access Ww Ww Ss R 
Table 46. ConirolReg register bit descriptions 
Bit Symbol Value Description 
7 TStopNow 1 timer stops immediately 
reading this bit always returns it to logicO 
6 TStartNow 1 timer starts immediately 
reading this bit always returns it to logic 0 
5to3 reserved - reserved for future use 
2to0O RxLastBits[2:0] | - indicates the number of valid bits in the last received byte 
if this value is 000b, the whole byte is valid 
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BitFramingReg register 
Adjustments for bit-oriented frames. 


Table 47. BitFramingReg register (address ODh); reset value: 00h bit allocation 



































Bit 7 6 5 4 3 2 1 0 
Symbol = StartSend RxAlign[2:0] reserved TxLastBits[2:0] 
Access W R/W - R/W 











Table 48. BitFramingReg register bit descriptions 
Bit Symbol Value |Description 








7 StartSend 1 starts the transmission of data 
only valid in combination with the Transceive command 





6 to4 RxAlign[2:0] used for reception of bit-oriented frames: defines the bit 
position for the first bit received to be stored in the FIFO buffer 


example: 





0 LSB of the received bit is stored at bit position 0, the second 
received bit is stored at bit position 1 


1 LSB of the received bit is stored at bit position 1, the second 

received bit is stored at bit position 2 

7 LSB of the received bit is stored at bit position 7, the second 
received bit is stored in the next byte that follows at bit 
position 0 

These bits are only to be used for bitwise anticollision at 

106 kBd, for all other modes they are set to 0 





3 reserved - reserved for future use 
2to0 TxLastBits[2:0] 





used for transmission of bit oriented frames: defines the 
number of bits of the last byte that will be transmitted 


000b indicates that all bits of the last byte will be transmitted 




















CollReg register 


Defines the first bit-collision detected on the RF interface. 


Table 49. CollReg register (address OEh); reset value: xxh bit allocation 



































Bit 7 6 5 4 3 2 1 0 
Symbol ValuesAfterColl reserved CollPosNotValid CollPos[4:0] 
Access R/W - R R 











Table 50. CollReg register bit descriptions 
Bit Symbol Value |Description 
7 ValuesAfterColl 0 all received bits will be cleared after a collision 


only used during bitwise anticollision at 106 kBd, 
otherwise it is set to logic 1 











reserved - reserved for future use 





CollPosNotValid 1 no collision detected or the position of the collision is 
out of the range of CollPos[4:0] 
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Table 50. CollReg register bit descriptions ...continued 





Bit (Symbol Value |Description 





received frame 
only data bits are interpreted 


example: 
00h indicates a bit-collision in the 32" bit 
Oth indicates a bit-collision in the 1° bit 
08h indicates a bit-collision in the 8" bit 


These bits will only be interpreted if the 
CollPosNotValid bit is set to logic 0 














4 to 0 |CollPos[4:0] - shows the bit position of the first detected collision in a 








Reserved register OFh 
Functionality is reserved for future use. 


Table 51. Reserved register (address OFh); reset value: 00h bit allocation 



































































































































Bit 7 6 5 4 3 2 1 0 

Symbol reserved 

Access - 

Table 52. Reserved register bit descriptions 

Bit Symbol Description 

7to0 reserved reserved for future use 

9.3.2 Page 1: Communication 
9.3.2.1 Reserved register 10h 

Functionality is reserved for future use. 

Table 53. Reserved register (address 10h); reset value: 00h bit allocation 

Bit 7 6 5 4 3 2 1 0 

Symbol reserved 

Access - 

Table 54. Reserved register bit descriptions 

Bit Symbol Description 

7to0 reserved reserved for future use 
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9.3.2.2 ModeReg register 


Defines general mode settings for transmitting and receiving. 


Table 55. ModeReg register (address 11h); reset value: 3Fh bit allocation 



































Bit 7 6 5 4 3 2 1 0 
Symbol MSBFirst reserved TxWaitRF reserved PolMFin reserved CRCPreset[1:0] 
Access R/W - R/W - R/W - R/W 











Table 56. ModeReg register bit descriptions 





Bit Symbol Value |Description 
7 MSBFirst 1 CRC coprocessor calculates the CRC with MSB first 


in the CRCResultReg register the values for the 
CRCResultMSB[7:0] bits and the CRCResultLSB[7:0] bits are bit 
reversed 





Remark: during RF communication this bit is ignored 


























6 reserved - reserved for future use 
5 TxWaitRF 1 transmitter can only be started if an RF field is generated 
4 reserved - reserved for future use 
3 PolMFin defines the polarity of pin MFIN 
Remark: the internal envelope signal is encoded active LOW, 
changing this bit generates a MFinActIRq event 
1 polarity of pin MFIN is active HIGH 
0 polarity of pin MFIN is active LOW 
2 reserved - reserved for future use 
1to0 CRCPreset defines the preset value for the CRC coprocessor for the CalcCRC 
[1:0] command 


Remark: during any communication, the preset values are 
selected automatically according to the definition of bits in the 
RxModeReg and TxModeReg registers 

















00 0000h 
o1 6363h 
10 A671h 
11 FFFFh 





9.3.2.3 TxModeReg register 
Defines the data rate during transmission. 


Table 57. TxModeReg register (address 12h); reset value: 00h bit allocation 















































Bit 7 6 5 4 3 2 1 0 
Symbol TxCRCEn TxSpeed[2:0] InvMod reserved 
Access R/W D R/W - 
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Table 58. TxModeReg register bit descriptions 

















Bit Symbol Value Description 
7 TxCRCEn 1 enables CRC generation during data transmission 
Remark: can only be set to logic 0 at 106 kBd 
6 to4 TxSpeed[2:0] defines the bit rate during data transmission 
the MFRC522 handles transfer speeds up to 
848 kBd 
000 106 kBd 
001 212 kBd 
010 424 kBd 
011 848 kBd 
100 reserved 
101 reserved 
110 reserved 
111 reserved 
3 InvMod 1 modulation of transmitted data is inverted 
2to0 reserved - reserved for future use 

















RxModeReg register 
Defines the data rate during reception. 


Table 59. RxModeReg register (address 13h); reset value: 00h bit allocation 



































Bit 7 6 5 4 3 2 1 0 
Symbol RxCRCEn RxSpeed[2:0] RxNoErr RxMultiple reserved 
Access R/W D R/W R/W s 











Table 60. RxModeReg register bit descriptions 














Bit Symbol Value |Description 
7 RxCRCEn 1 enables the CRC calculation during reception 
Remark: can only be set to logic 0 at 106 kBd 
6to4 |RxSpeed[2:0] defines the bit rate while receiving data 
the MFRC522 handles transfer speeds up to 848 kBd 
000 106 kBd 
001 212 kBd 
010 424 kBd 
011 848 kBd 
100 reserved 
101 reserved 
110 reserved 
111 reserved 
3 RxNoErr 1 an invalid received data stream (less than 4 bits received) will 
be ignored and the receiver remains active 
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Table 60. RxModeReg register bit descriptions ...continued 





Bit Symbol 


Value |Description 





2 RxMultiple 


0 receiver is deactivated after receiving a data frame 





1 able to receive more than one data frame 


polling command 


the bit 
if set to logic 1, an error byte is added to the FIFO buffer 


status is reflected in the signal CRCErr. 


only valid for data rates above 106 kBd in order to handle the 


after setting this bit the Receive and Transceive commands will 
not terminate automatically. Multiple reception can only be 
deactivated by writing any command (except the Receive 
commana) to the CommandReg register, or by the host clearing 


end of a received data stream which is a copy of the ErrorReg 

register value. For the MFRC522 version 2.0 the CRC status is 
reflected in the signal CRCOk, which indicates the actual status 
of the CRC coprocessor. For the MFRC522 version 1.0 the CRC 


at the 











1to0O |reserved 








- reserved for future use 








9.3.2.5 TxConirolReg register 


Controls the logical behavior of the antenna driver pins TX1 and TX2. 


Table 61. TxConirolReg register (address 14h); reset value: 80h bit allocation 

































































Bit 7 S| es ae a ear 0 
Symbol InvTx2RF InvTxiRF InvTx2RF InvTxi1RF Tx2CW reserved Tx2RFEn Tx1RFEn 
On On Off Off 
Access R/W R/W R/W R/W R/W - R/W R/W 
Table 62. TxControlReg register bit descriptions 
Bit |Symbol Value |Description 
7 |InvTx2RFOn |1 output signal on pin TX2 inverted when driver TX2 is enabled 
6 |InvTx1RFOn |1 output signal on pin TX1 inverted when driver TX1 is enabled 
5 |InvTx2RFOff | 1 output signal on pin TX2 inverted when driver TX2 is disabled 
4 |InvTx1RFOff |1 output signal on pin TX1 inverted when driver TX1 is disabled 
3 | Tx2CW 1 output signal on pin TX2 continuously delivers the unmodulated 
13.56 MHz energy carrier 
0 Tx2CW bit is enabled to modulate the 13.56 MHz energy carrier 
reserved - reserved for future use 
Tx2RFEn 1 output signal on pin TX2 delivers the 13.56 MHz energy carrier 
modulated by the transmission data 
0 |Tx1RFEn 1 output signal on pin TX1 delivers the 13.56 MHz energy carrier 
modulated by the transmission data 
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9.3.2.6 TxASKReg register 


Controls transmit modulation settings. 


Table 63. TxASKReg register (address 15h); reset value: 00h bit allocation 



































Bit 7 6 5 4 3 2 1 0 
Symbol reserved Force100ASK reserved 
Access - R/W - 











Table 64. TxASKReg register bit descriptions 











Bit | Symbol Value |Description 
7 reserved - reserved for future use 
6 Force100ASK |1 forces a 100 % ASK modulation independent of the ModGsPReg 


register setting 




















5 to 0 reserved - reserved for future use 





9.3.2.7. TxSelReg register 


Selects the internal sources for the analog module. 


Table 65. TxSelReg register (address 16h); reset value: 10h bit allocation 
































Bit 7 6 5 4 3 2 1 0 
Symbol: reserved DriverSel[1:0] MFOutSel[3:0] 
Access: - R/W R/W 





Table 66. TxSelReg register bit descriptions 
Bit Symbol | Value Description 








7to6 |reserved |- reserved for future use 
5to4 /DriverSel selects the input of drivers TX1 and TX2 


[1:0] 00 3-state; in soft power-down the drivers are only in 3-state 
mode if the DriverSel[1:0] value is set to 3-state mode 


01 modulation signal (envelope) from the internal encoder, Miller 
pulse encoded 














10 modulation signal (envelope) from pin MFIN 


11 HIGH; the HIGH level depends on the setting of bits 
InvTx1RFOn/InvTx1RFOff and InvTx2RFOn/InvTx2RFOff 
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Table 66. TxSelReg register bit descriptions ...continued 
































Bit Symbol | Value Description 
3to0 MFOutSel selects the input for pin MFOUT 
[3:0] 0000 3-state 
0001 LOW 
0010 HIGH 
0011 test bus signal as defined by the TestSel1 Reg register’s 
TstBusBitSel[2:0] value 
0100 modulation signal (envelope) from the internal encoder, Miller 
pulse encoded 
0101 serial data stream to be transmitted, data stream before Miller 
encoder 
0110 reserved 
0111 serial data stream received, data stream after Manchester 
decoder 





1000 to 1111 reserved 




















9.3.2.8 RxSelReg register 


Selects internal receiver settings. 


Table 67. RxSelReg register (address 17h); reset value: 84h bit allocation 






































Bit 7 6 5 4 3 2 1 0 
Symbol UARTSel[1:0] RxWait[5:0] 
Access R/W R/W 








Table 68. RxSelReg register bit descriptions 





Bit Symbol |Value Description 





7to6 |UARTSel selects the input of the contactless UART 
[1:0] 00 constant LOW 
01 Manchester with subcarrier from pin MFIN 
10 modulated signal from the internal analog module, default 
11 NRZ coding without subcarrier from pin MFIN which is only valid 


for transfer speeds above 106 kBd 


























5toO0 |RxWait  |- after data transmission the activation of the receiver is delayed for 
[5:0] RxWait bit-clocks, during this ‘frame guard time’ any signal on pin RX 

is ignored 
this parameter is ignored by the Receive command 
all other commands, such as Transceive, MFAuthent use this 
parameter 
the counter starts immediately after the external RF field is switched 
on 
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9.3.2.9 RxThresholdReg register 
Selects thresholds for the bit decoder. 


Table 69. RxThresholdReg register (address 18h); reset value: 84h bit allocation 



































Bit 7 6 5 4 3 2 1 0 
Symbol MinLevel[3:0] reserved CollLevel[2:0] 
Access R/W - R/W 








Table 70. RxThresholdReg register bit descriptions 














Bit Symbol Description 
7to4 MinLevel defines the minimum signal strength at the decoder input that will be 
[3:0] accepted 
if the signal strength is below this level it is not evaluated 
3 reserved reserved for future use 
2to0 CollLevel defines the minimum signal strength at the decoder input that must be 
[2:0] reached by the weaker half-bit of the Manchester encoded signal to 


generate a bit-collision relative to the amplitude of the stronger half-bit 














9.3.2.10 DemodReg register 
Defines demodulator settings. 


Table 71. DemodReg register (address 19h); reset value: 4Dh bit allocation 





























Bit 7 6 5 4 3 2 | 1 0 

Symbol AddlQ[1 :0] FixlQ — TPrescal TauRcv{1 :0] TauSync[1 :0] 
Even 

Access R/W R/W R/W R/W R/W 





Table 72. DemodReg register bit descriptions 











Bit Symbol Value |Description 
7to6 |AddiQ - defines the use of | and Q channel during reception 
[1:0] Remark: the FixIQ bit must be set to logic 0 to enable the following 
settings: 
00 selects the stronger channel 
01 selects the stronger channel and freezes the selected channel 
during communication 

10 reserved 
11 reserved 

5 FixlQ 1 if AddIQ[1:0] are set to XOb, the reception is fixed to | channel 

















if Add|Q[1:0] are set to X1b, the reception is fixed to Q channel 
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Table 72. DemodReg register bit descriptions ...continued 





Bit Symbol Value |Description 
4 TPrescalEven |R/W_ |Available on RC522 version 1.0 and version 2.0: 


If set to logic 0 the following formula is used to calculate the timer 
frequency of the prescaler: 


ftimer = 13.56 MHz / (2*TPreScaler+1). 
Only available on version 2.0: 





If set to logic 1 the following formula is used to calculate the timer 
frequency of the prescaler: 
ftimer = 13.56 MHz / (2*TPreScaler+2). 


Default TPrescalEven bit is logic 0, find more information on the 
prescaler in Section 8.5. 





3to2 TauRcv{[1:0] changes the time-constant of the internal PLL during data 
reception 


Remark: if set to 0O0b the PLL is frozen during data reception 





1to0O TauSync[1:0] |- changes the time-constant of the internal PLL during burst 




















Reserved register 1Ah 
Functionality is reserved for future use. 
Table 73. Reserved register (address 1Ah); reset value: 00h bit allocation 


Bit 7 6 5 4 3 2 1 0 
Symbol reserved 



































Access - 





Table 74. Reserved register bit descriptions 





Bit Symbol Description 

















7to0 reserved reserved for future use 





Reserved register 1Bh 
Functionality is reserved for future use. 
Table 75. Reserved register (address 1Bh); reset value: 00h bit allocation 


Bit 7 6 5 4 3 2 1 0 
Symbol reserved 



































Access - 











Table 76. Reserved register bit descriptions 





Bit Symbol Description 





7toO reserved reserved for future use 

















MfTxReg register 
Controls some MIFARE communication transmit parameters. 
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Table 77. MfTxReg register (address 1Ch); reset value: 62h bit allocation 



































Bit 7 6 5 4 3 2 1 0 
Symbol reserved TxWait[1 :0] 
Access - R/W 





Table 78. MfTxReg register bit descriptions 











Bit Symbol Description 
7to2 reserved reserved for future use 
1to0 TxWait defines the additional response time 
7 bits are added to the value of the register bit by default 

















MfRxReg register 


Table 79. MfRxReg register (address 1Dh); reset value: 00h bit allocation 
































Bit 7 6 5 4 3 2 1 0 
Symbol reserved ParityDisable reserved 
Access - R/W - 











Table 80. MfRxReg register bit descriptions 











Bit |Symbol Value |Description 
7to5 reserved - reserved for future use 
4 ParityDisable 1 generation of the parity bit for transmission and the parity check for 


receiving is switched off 
the received parity bit is handled like a data bit 





3 to 0 reserved - reserved for future use 




















Reserved register 1Eh 
Functionality is reserved for future use. 
Table 81. Reserved register (address 1Eh); reset value: 00h bit allocation 


Bit 7 6 5 4 3 2 1 0 
Symbol reserved 









































Access - 





Table 82. Reserved register bit descriptions 





Bit Symbol Description 





7to0 reserved reserved for future use 

















SerialSpeedReg register 
Selects the speed of the serial UART interface. 


Table 83. SerialSpeedReg register (address 1Fh); reset value: EBh bit allocation 












































Bit 7 6 5 4 3 2 1 0 
Symbol BR_TO[2:0] BR_T1[4:0] 
Access R/W R/W 
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Table 84. SerialSpeedReg register bit descriptions 

Bit Symbol Description 

7to5 BR_TO[2:0] factor BR_TO adjusts the transfer speed: for description, see 
Section 8.1.3.2 on page 12 

4to0 BR_T1[4:0] factor BR_T1 adjusts the transfer speed: for description, see 
Section 8.1.3.2 on page 12 
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Page 2: Configuration 


Reserved register 20h 

Functionality is reserved for future use. 

Table 85. Reserved register (address 20h); reset value: 00h bit allocation 

Bit (amen ee ea ee le 1 0 
Symbol : 




















Access reserved 





Table 86. Reserved register bit descriptions 





Bit Symbol Description 

















7to0 reserved reserved for future use 





CRCResultReg registers 
Shows the MSB and LSB values of the CRC calculation. 


Remark: The CRC is split into two 8-bit registers. 


Table 87. CRCResultReg (higher bits) register (address 21h); reset value: FFh bit allocation 



































Bit 7 6 5 4 3 2 1 0 
Symbol CRCResultMSB[7:0] 
Access R 











Table 88. CRCResultReg register higher bit descriptions 
Bit Symbol Description 








7to0 CRCResultMSB shows the value of the CRCResultReg register’s most significant 
[7:0] byte 
only valid if Status1 Reg register’s CRCReady bit is set to logic 1 

















Table 89. CRCResultReg (lower bits) register (address 22h); reset value: FFh bit allocation 



































Bit 7 6 5 4 3 2 1 0 
Symbol CRCResultLSB[7:0] 
Access R 











Table 90. CRCResultReg register lower bit descriptions 








Bit Symbol Description 
7to0 CRCResultLSB _ |shows the value of the least significant byte of the CRCResultReg 
[7:0] register 
only valid if Status1 Reg register’s CRCReady bit is set to logic 1 
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Reserved register 23h 
Functionality is reserved for future use. 
Table 91. Reserved register (address 23h); reset value: 88h bit allocation 


Bit 7 6 5 4 3 2 1 0 
Symbol reserved 



































Access - 











Table 92. Reserved register bit descriptions 
Bit Symbol Description 

















7to0 reserved reserved for future use 








ModWidthReg register 
Sets the modulation width. 


Table 93. ModWidthReg register (address 24h); reset value: 26h bit allocation 
































Bit 7 6 5 4 3 2 1 0 
Symbol ModWidth[7:0] 
Access R/W 














Table 94. ModWidthReg register bit descriptions 
Bit Symbol Description 


7to0 ModWidth[7:0] |defines the width of the Miller modulation as multiples of the carrier 
frequency (ModWidth + 1 / fe) 


the maximum value is half the bit period 























Reserved register 25h 
Functionality is reserved for future use. 
Table 95. Reserved register (address 25h); reset value: 87h bit allocation 


Bit 7 6 5 4 3 2 1 0 
Symbol reserved 



































Access - 











Table 96. Reserved register bit descriptions 























Bit Symbol Description 
7 to 0 reserved reserved for future use 
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9.3.3.6 RFCfgReg register 
Configures the receiver gain. 


Table 97. RFCfgReg register (address 26h); reset value: 48h bit allocation 



































Bit 7 6 5 4 3 2 1 0 
Symbol _ reserved RxGain[2:0] reserved 
Access - R/W - 








Table 98. RFCfgReg register bit descriptions 














Bit Symbol Value __| Description 
7 reserved - reserved for future use 
6to4 |RxGain defines the receiver’s signal voltage gain factor: 
[2:0] 000 18 dB 
001 23 dB 
010 18 dB 
011 23 dB 
100 33 dB 
101 38 dB 
110 43 dB 
111 48 dB 
3to0 reserved - reserved for future use 




















9.3.3.7 GsNReg register 


Defines the conductance of the antenna driver pins TX1 and TX2 for the n-driver when the 
driver is switched on. 


Table 99. GsNReg register (address 27h); reset value: 88h bit allocation 






































Bit 7 6 5 4 3 2 1 0 
Symbol CWGsN{3:0] ModGsNJ[3:0] 
Access R/W R/W 








Table 100. GsNReg register bit descriptions 





Bit Symbol Description 





7to4  |CWGsN defines the conductance of the output n-driver during periods without 
[3:0] modulation which can be used to regulate the output power and 
subsequently current consumption and operating distance 


Remark: the conductance value is binary-weighted 
during soft Power-down mode the highest bit is forced to logic 1 
value is only used if driver TX1 or TX2 is switched on 





3to0 |ModGsN _ |defines the conductance of the output n-driver during periods without 
[3:0] modulation which can be used to regulate the modulation index 


Remark: the conductance value is binary weighted 
during soft Power-down mode the highest bit is forced to logic 1 














value is only used if driver TX1 or TX2 is switched on 
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9.3.3.8 CWGsPReg register 


9.3.3.9 


9.3.3.10 


Defines the conductance of the p-driver output during periods of no modulation. 


Table 101. CWGsPReg register (address 28h); reset value: 20h bit allocation 






































Bit 7 6 5 4 3 2 1 0 
Symbol reserved CWGsPJ[5:0] 
Access - R/W 








Table 102. CWGsPReg regisier bit descriptions 
Bit Symbol Description 








7to6 reserved reserved for future use 





5to0 CWGsP[5:0] __|defines the conductance of the p-driver output which can be used to 
regulate the output power and subsequently current consumption and 
operating distance 


Remark: the conductance value is binary weighted 
during soft Power-down mode the highest bit is forced to logic 1 

















ModGsPReg register 


Defines the conductance of the p-driver output during modulation. 


Table 103. ModGsPReg register (address 29h); reset value: 20h bit allocation 
































Bit 7 6 5 4 3 2 1 0 
Symbol reserved ModGsPJ[5:0] 
Access - R/W 





Table 104. ModGsPReg register bit descriptions 











Bit Symbol Description 
7to6 reserved reserved for future use 
5to0 ModGsP[5:0] defines the conductance of the p-driver output during modulation 


which can be used to regulate the modulation index 
Remark: the conductance value is binary weighted 
during soft Power-down mode the highest bit is forced to logic 1 


if the TxASKReg register’s Force100ASK bit is set to logic 1 the value 
of ModGsP has no effect 

















TModeReg and TPrescalerReg registers 
These registers define the timer settings. 


Remark: The TPrescaler setting higher 4 bits are in the TModeReg register and the lower 
8 bits are in the TPrescalerReg register. 


Table 105. TModeReg register (address 2Ah); reset value: 00h bit allocation 












































Bit 7 6 5 4 3 2 1 0 
Symbol TAuto TGated[1 :0] TAutoRestart TPrescaler_Hi[3:0] 
Access R/W R/W R/W R/W 
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Table 106. TModeReg register bit descriptions 





Bit Symbol 


Value 


Description 





7 TAuto 


{ 


timer starts automatically at the end of the transmission in 
all communication modes at all speeds 


if the RxModeReg register’s RxMultiple bit is not set, the 
timer stops immediately after receiving the 5th bit (1 start. 
bit, 4 data bits) 


if the RxMultiple bit is set to logic 1 the timer never stops, in 


which case the timer can be stopped by setting the 
ControlReg register’s TStopNow bit to logic 1 





indicates that the timer is not influenced by the protocol 





6to5 TGated[1:0] 


00 
01 
10 
11 


internal timer is running in gated mode 


Remark: in gated mode, the Status1 Reg register’s 
TRunning bit is logic 1 when the timer is enabled by the 
TModeReg register’s TGated[1 :0] bits 


this bit does not influence the gating signal 
non-gated mode 
gated by pin MFIN 
gated by pin AUX1 





4 TAutoRestart 


timer automatically restarts its count-down from the 16-bit 
timer reload value instead of counting down to zero 





timer decrements to 0 and the ComirqReg register’s 
Timer|Rq bit is set to logic 1 








3to0 /|TPrescaler_Hi[3:0] 








defines the higher 4 bits of the TPrescaler value 


The following formula is used to calculate the timer 
frequency if the DemodReg register’s TPrescalEven bit in 
Demot Regis set to logic 0: 

flimer = 13.56 MHz / (2*TPreScaler+1). 
Where TPreScaler = [TPrescaler_Hi:TPrescaler_Lo] 
(TPrescaler value on 12 bits) (Default TPrescalEven 
bit is logic 0) 
The following formula is used to calculate the timer 
frequency if the DemodReg register’s TPrescalEven bit is 
set to logic 1: 

flimer = 13.56 MHz / (2*TPreScaler+2). 
See Section 8.5 “Timer unit”. 








Table 107. TPrescalerReg register (address 2Bh); reset value: 00h bit allocation 









































Bit 7 6 5 4 3 2 1 0 
Symbol TPrescaler_Lo[7:0] 
Access R/W 
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Table 108. TPrescalerReg register bit descriptions 





Bit Symbol Description 





7to0 |TPrescaler_Lo[7:0] |defines the lower 8 bits of the TPrescaler value 


The following formula is used to calculate the timer frequency if the 
DemodReg register’s TPrescalEven bit is set to logic 0: 


fimer = 13.56 MHz / (2*TPreScaler+1). 


Where TPreScaler = [TPrescaler_Hi:TPrescaler_Lo] (TPrescaler 
value on 12 bits) (Default TPrescalEven bit is logic 0) 


The following formula is used to calculate the timer frequency if the 
DemodReg register’s TPrescalEven bit inDemoReg is set to logic 1: 


fiimer = 13.56 MHz / (2*TPreScaler+2). 
See Section 8.5 “Timer unit”. 




















TReloadReg register 


Defines the 16-bit timer reload value. 
Remark: The reload value bits are contained in two 8-bit registers. 


Table 109. TReloadReg (higher bits) register (address 2Ch); reset value: 00h bit allocation 



































Bit 7 6 5 4 3 2 1 0 
Symbol TReloadVal_Hi[7:0] 
Access R/W 











Table 110. TReloadReg register higher bit descriptions 





Bit Symbol Description 
7 to 0 | TReloadVal_Hi[7:0] |defines the higher 8 bits of the 16-bit timer reload value 
on a start event, the timer loads the timer reload value 





changing this register affects the timer only at the next start event 

















Table 111. TReloadReg (lower bits) register (address 2Dh); reset value: 00h bit allocation 









































Bit 7 6 5 4 3 2 1 0 
Symbol TReloadVal_Lo[7:0] 
Access R/W 





Table 112. TReloadReg register lower bit descriptions 





Bit Symbol Description 

7 to 0 | TReloadVal_Lo[7:0] |defines the lower 8 bits of the 16-bit timer reload value 

on a start event, the timer loads the timer reload value 

changing this register affects the timer only at the next start event 




















TCounterValReg register 
Contains the timer value. 


Remark: The timer value bits are contained in two 8-bit registers. 
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Table 113. TCounterValReg (higher bits) register (address 2Eh); reset value: xxh bit 
allocation 

Bit 7 6 5 4 3 2 1 0 

Symbol TCounterVal_Hi[7:0] 

Access R 

Table 114. TCounterValReg register higher bit descriptions 

Bit Symbol Description 

7to0 TCounterVal_Hi timer value higher 8 bits 
[7:0] 

Table 115. TCounterValReg (lower bits) register (address 2Fh); reset value: xxh bit 
allocation 

Bit 7 6 5 4 3 2 1 0 

Symbol TCounterVal_Lo[7:0] 

Access R 

Table 116. TCounterValReg register lower bit descriptions 

Bit Symbol Description 

7to0 TCounterVal_Lo /|timer value lower 8 bits 
[7:0] 

Page 3: Test 


Reserved register 30h 


Functionality is reserved for future use. 


Table 117. Reserved register (address 30h); reset value: 00h bit allocation 





Bit 


7 








6 


5 4 3 2 1 0 























Symbol 


reserved 





Access 





Table 118. Reserved register bit descriptions 





Bit 


Symbol 


Description 





7to0 








reserved 





reserved for future use 








TestSel1Reg register 


General test signal configuration. 


Table 119. TesiSel1Reg register (address 31h); reset value: 00h bit allocation 






































Bit 7 6 5 4 3 2 1 0 
Symbol reserved TstBusBitSel[2:0] 
Access - R/W 
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Table 120. TesiSel1Reg register bit descriptions 





Bit Symbol Description 





7to3 reserved reserved for future use 





2to0 TstBusBitSel | selects a test bus signal which is output at pin MFOUT 


[2:0] if AnalogSelAux2[3:0] = FFh in AnalogTestReg register, test bus signal 
is also output at pins AUX1 or AUX2 














TestSel2Reg register 


General test signal configuration and PRBS control. 


Table 121. TesiSel2Reg register (address 32h); reset value: 00h bit allocation 











Bit Z | 6 | 5 | 4 | 3 | 2 | 1 | 0 
Symbol TstBusFlip PRBS9 PRBS15 TestBusSel[4:0] 
Access R/W R/W R/W R/W 








Table 122. TesiSel2Reg register bit descriptions 





Bit Symbol Value |Description 





7 TstBusFlip 1 test bus is mapped to the parallel port in the following order: 


TstBusBit4, TstBusBit3, TstBusBit2, TstBusBit6, TstBusBit5, 
TstBusBitO; see Section 16.1 on page 82 


6 PRBS9 - starts and enables the PRBS9 sequence according to ITU-TO150 


Remark: all relevant registers to transmit data must be 
configured before entering PRBS9 mode 


the data transmission of the defined sequence is started by the 
Transmit command 











5 PRBS15 - starts and enables the PRBS15 sequence according to 
ITU-TO150 

Remark: all relevant registers to transmit data must be 
configured before entering PRBS15 mode 


the data transmission of the defined sequence is started by the 
Transmit command 




















4 to 0 | TestBusSel[4:0] selects the test bus; see Section 16.1 “Test signals” 








TestPinEnReg register 
Enables the test bus pin output driver. 


Table 123. TestPinEnReg register (address 33h); reset value: 80h bit allocation 












































Bit 7 6 5 4 3 2 1 0 
Symbol RS232LineEn TestPinEn[5:0] reserved 
Access R/W R/W - 
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Table 124. TestPinEnReg register bit descriptions 











Bit Symbol Value Description 
7 RS232LineEn |0 serial UART lines MX and DTRQ are disabled 
6 to 1 TestPinEn - enables the output driver on one of the data pins D1 to D7 which 
[5:0] outputs a test signal 
Example: 


setting bit 1 to logic 1 enables pin D1 output 
setting bit 5 to logic 1 enables pin D5 output 


Remark: If the SPI is used, only pins D1 to D4 can be used. If the 
serial UART interface is used and the RS232LineEn bit is set to 
logic 1 only pins D1 to D4 can be used. 





0 reserved - reserved for future use 




















TestPinValueReg register 
Defines the HIGH and LOW values for the test port D1 to D7 when it is used as I/O. 


Table 125. TestPinValueReg register (address 34h); reset value: 00h bit allocation 



































Bit 7 6 5 4 3 2 1 0 
Symbol UselO TestPinValue[5:0] reserved 
Access R/W R/W - 





Table 126. TestPinValueReg register bit descriptions 





Bit Symbol Value Description 





7 UselO 1 enables the I/O functionality for the test port when one of the serial 
interfaces is used 


the input/output behavior is defined by value TestPinEn[5:0] in the 
TestPinEnReg register 


the value for the output behavior is defined by TestPinValue[5:0] 





6to1 |/TestPinValue |- defines the value of the test port when it is used as I/O and each 
[5:0] output must be enabled by TestPinEn[5:0] in the TestPinEnReg 
register 


Remark: Reading the register indicates the status of pins D6 to D1 
if the UselO bit is set to logic 1. If the UselO bit is set to logic 0, the 
value of the TestPinValueReg register is read back. 





0 reserved - reserved for future use 




















TestBusReg register 
Shows the status of the internal test bus. 


Table 127. TestBusReg register (address 35h); reset value: xxh bit allocation 












































Bit 7 6 5 4 3 2 1 0 
Symbol TestBus[7:0] 
Access R 
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Table 128. TestBusReg register bit descriptions 
Bit Symbol Description 
7to0 TestBus[7:0] shows the status of the internal test bus 


the test bus is selected using the TestSel2Reg register; see 
Section 16.1 on page 82 


























AutoTestReg register 
Controls the digital self-test. 


Table 129. AutoTestReg register (address 36h); reset value: 40h bit allocation 











Bit SS Ss ee SS Sa es a SS 
Symbol reserved AmpRcv RFT SelfTest[3:0] 
Access - R/W - R/W 





Table 130. AutoTestReg register bit descriptions 











Bit Symbol Value |Description 
7 reserved - reserved for production tests 
6 AmpRcv 1 internal signal processing in the receiver chain is performed 


non-linearly which increases the operating distance in 
communication modes at 106 kBd 


Remark: due to non-linearity, the effect of the RxThresholdReg 
register’s MinLevel[3:0] and the CollLevel[2:0] values is also 
non-linear 





5to4 RFT - reserved for production tests 
3 to 0 | SelfTest[3:0] 





enables the digital self test 


the self test can also be started by the CalcCRC command; see 
Section 10.3.1.4 on page 71 


the self test is enabled by value 1001b 


Remark: for default operation the self test must be disabled 
by value 0000b 























VersionReg register 
Shows the MFRC522 software version. 


Table 131. VersionReg register (address 37h); reset value: xxh bit allocation 



































Bit 7 6 5 4 3 2 1 0 
Symbol Version[7:0] 
Access R 











Table 132. VersionReg register bit descriptions 























Bit Symbol Description 

7to4 Chiptype ‘9’ stands for MFRC522 

3 to 0 Version ‘1’ stands for MFRC522 version 1.0 and ‘2’ stands for MFRC522 
version 2.0. 





MFRC522 version 1.0 software version is: 91h. 


MFRC522 version 2.0 software version is: 92h. 
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Determines the analog output test signal at, and status of, pins AUX1 and AUX2. 


Table 133. AnalogTestReg register (address 38h); reset value: 00h bit allocation 






































Bit 7 6 5 4 3 2 1 0 
Symbol AnalogSelAux1[3:0] AnalogSelAux2[3:0] 
Access R/W R/W 





Table 134. AnalogTestReg register bit descriptions 





Bit Symbol 


Value 


Description 





[3:0] 


7 to 4 |AnalogSelAux1 


0000 
0001 
0010 
0011 
0100 
0101 
0110 
0111 

1000 
1001 
1010 
1011 

1100 


1101 


1110 


1111 


controls pin AUX1 
3-state 
output of TestDAC1 (AUX1), output of TestDAC2 (AUX2)E] 
test signal Corr1l] 
reserved 
DAC: test signal MinLevell!] 
DAC: test signal ADC_IU] 
DAC: test signal ADC_Ql!] 
reserved 
reserved, test signal for production testl!] 
reserved 
HIGH 
LOW 
TxActive: 
at 106 kBd: HIGH during Start bit, Data bit, Parity and CRC 


at 212 kBd: 424 kBd and 848 kBd: HIGH during data and 
CRC 


RxActive: 
at 106 kBd: HIGH during Data bit, Parity and CRC 


at 212 kBd: 424 kBd and 848 kBd: HIGH during data and 
CRC 


subcarrier detected: 
106 kBd: not applicable 


212 kBd: 424 kBd and 848 kBd: HIGH during last part of 
data and CRC 
test bus bit as defined by the TestSel1 Reg register’s 
TstBusBitSel[2:0] bits 


Remark: all test signals are described in Section 16.1 on 
page 82 











[3:0] 


3 to 0 |AnalogSelAux2 |- 








controls pin AUX2 (see bit descriptions for AUX1) 








[1] Remark: Current source output; the use of 1 kQ pull-down resistor on AUXn is recommended. 


MFRC522 
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9.3.4.10 TestDAC1Reg register 


9.3.4.11 


9.3.4.12 


9.3.4.13 


MFRC522 


Defines the test value for TestDAC1. 


Table 135. TestDAC1Reg register (address 39h); reset value: xxh bit allocation 






































Bit 7 6 5 4 3 2 1 0 
Symbol reserved TestDAC1[5:0] 
Access - R/W 








Table 136. TestDAC1Reg register bit descriptions 











Bit Symbol Description 
7 reserved reserved for production tests 
6 reserved reserved for future use 





5to0 TestDAC1[5:0] defines the test value for TestDAC1 


output of DAC1 can be routed to AUX1 by setting value 
AnalogSelAux1[3:0] to 0001b in the AnalogTestReg register 

















TestDAC2Reg register 
Defines the test value for TestDAC2. 


Table 137. TestDAC2Reg register (address 3Ah); reset value: xxh bit allocation 






































Bit 7 6 5 4 3 2 1 0 
Symbol reserved TestDAC2[5:0] 
Access - R/W 








Table 138. TestDAC2Reg register bit descriptions 
Bit Symbol 
7to6 reserved 





Description 





reserved for future use 
5to0 TestDAC2[5:0] |defines the test value for TestDAC2 


output of DAC2 can be routed to AUX2 by setting value 
AnalogSelAux2[3:0] to 0001b in the AnalogTestReg register 




















TestADCReg register 
Shows the values of ADC | and Q channels. 


Table 139. TestADCReg register (address 3Bh); reset value: xxh bit allocation 









































Bit 7 6 5 4 3 2 1 0 
Symbol ADC_1[3:0] ADC_QJ3:0] 
Access R R 





Table 140. TestADCReg register bit descriptions 
Bit Symbol 
7to4 ADC_|[8:0] 





Description 





ADC | channel value 

















3to0 ADC_QJ38:0] | /ADC Q channel value 





Reserved register 3Ch 


Functionality reserved for production test. 
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Table 141. Reserved register (address 3Ch); reset value: FFh bit allocation 
Bit 7 6 5 4 3 2 0 
Symbol RFT 
Access . 
Table 142. Reserved register bit descriptions 
Bit Symbol Description 
7to0 reserved reserved for production tests 
Table 143. Reserved register (address 3Dh); reset value: 00h bit allocation 
Bit 7 6 5 4 3 2 0 
Symbol RFT 
Access - 
Table 144. Reserved register bit descriptions 
Bit Symbol Description 
7to0 reserved reserved for production tests 
Table 145. Reserved register (address 3Eh); reset value: 03h bit allocation 
Bit 7 6 5 4 3 2 0 
Symbol RFT 
Access - 
Table 146. Reserved register bit descriptions 
Bit Symbol Description 
7to0 reserved reserved for production tests 
Table 147. Reserved register (address 3Fh); reset value: 00h bit allocation 
Bit 7 6 5 4 3 2 0 
Symbol reserved 
Access : 
Table 148. Reserved register bit descriptions 
Bit Symbol Description 
7to0 reserved reserved for production tests 
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10. MFRC522 command set 





10.1 General description 


The MFRC522 operation is determined by a state machine capable of performing a set of 
commands. A command is executed by writing a command code (see Table 149) to the 
CommandReg register. 


Arguments and/or data necessary to process a command are exchanged via the FIFO 
buffer. 


10.2 General behavior 


¢ Each command that needs a data bit stream (or data byte stream) as an input 
immediately processes any data in the FIFO buffer. An exception to this rule is the 
Transceive command. Using this command, transmission is started with the 
BitFramingReg register’s StartSend bit. 


¢ Each command that needs a certain number of arguments, starts processing only 
when it has received the correct number of arguments from the FIFO buffer. 


¢ The FIFO buffer is not automatically cleared when commands start. This makes it 
possible to write command arguments and/or the data bytes to the FIFO buffer and 
then start the command. 


¢ Each command can be interrupted by the host writing a new command code to the 
CommandReg register, for example, the Idle command. 


10.3 MFRC522 command overview 


Table 149. Command overview 























Command Command | Action 
code 
Idle 0000 no action, cancels current command execution 
Mem 0001 stores 25 bytes into the internal buffer 
Generate RandomID |0010 generates a 10-byte random ID number 
CalcCRC 0011 activates the CRC coprocessor or performs a self test 
Transmit 0100 transmits data from the FIFO buffer 
NoCmdChange 0111 no command change, can be used to modify the 


CommandReg register bits without affecting the command, 
for example, the PowerDown bit 
































Receive 1000 activates the receiver circuits 
Transceive 1100 transmits data from FIFO buffer to antenna and automatically 
activates the receiver after transmission 
- 1101 reserved for future use 
MFAuthent 1110 performs the MIFARE standard authentication as a reader 
SoftReset 1111 resets the MFRC522 
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10.3.1 


10.3.1.1 


10.3.1.2 


10.3.1.3 


10.3.1.4 


10.3.1.5 


10.3.1.6 
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MFRC522 command descriptions 


Idle 
Places the MFRC522 in Idle mode. The Idle command also terminates itself. 


Mem 
Transfers 25 bytes from the FIFO buffer to the internal buffer. 


To read out the 25 bytes from the internal buffer the Mem command must be started with 
an empty FIFO buffer. In this case, the 25 bytes are transferred from the internal buffer to 
the FIFO. 


During a hard power-down (using pin NRSTPD), the 25 bytes in the internal buffer remain 
unchanged and are only lost if the power supply is removed from the MFRC522. 


This command automatically terminates when finished and the Idle command becomes 
active. 


Generate RandomIiD 


This command generates a 10-byte random number which is initially stored in the internal 
buffer. This then overwrites the 10 bytes in the internal 25-byte buffer. This command 
automatically terminates when finished and the MFRC522 returns to Idle mode. 


CalcCRC 


The FIFO buffer content is transferred to the CRC coprocessor and the CRC calculation is 
started. The calculation result is stored in the CRCResultReg register. The CRC 
calculation is not limited to a dedicated number of bytes. The calculation is not stopped 
when the FIFO buffer is empty during the data stream. The next byte written to the FIFO 
buffer is added to the calculation. 


The CRC preset value is controlled by the ModeReg register’s CRCPrese?i[1:0] bits. The 
value is loaded in to the CRC coprocessor when the command starts. 


This command must be terminated by writing a command to the CommandReg register, 
such as, the Idle command. 


If the AutoTestReg register’s SelfTest[3:0] bits are set correctly, the MFRC522 enters Self 
Test mode. Starting the CalcCRC command initiates a digital self test. The result of the 
self test is written to the FIFO buffer. 


Transmit 


The FIFO buffer content is immediately transmitted after starting this command. Before 
transmitting the FIFO buffer content, all relevant registers must be set for data 
transmission. 


This command automatically terminates when the FIFO buffer is empty. It can be 
terminated by another command written to the CommandReg register. 
NoCmdChange 


This command does not influence any running command in the CommandReg register. It 
can be used to manipulate any bit except the CommandReg register Command[3:0] bits, 
for example, the RevOff bit or the PowerDown bit. 
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Receive 
The MFRC522 activates the receiver path and waits for a data stream to be received. The 
correct settings must be chosen before starting this command. 


This command automatically terminates when the data stream ends. This is indicated 
either by the end of frame pattern or by the length byte depending on the selected frame 
type and speed. 


Remark: If the RxModeReg register’s RxMultiple bit is set to logic 1, the Receive 
command will not automatically terminate. It must be terminated by starting another 
command in the CommandReg register. 

Transceive 


This command continuously repeats the transmission of data from the FIFO buffer and the 
reception of data from the FF field. The first action is transmit and after transmission the 
command is changed to receive a data stream. 


Each transmit process must be started by setting the BitFramingReg register’s StartSend 
bit to logic 1. This command must be cleared by writing any command to the 
CommandReg register. 


Remark: If the RxModeReg register’s RxMultiple bit is set to logic 1, the Transceive 
command never leaves the receive state because this state cannot be cancelled 
automatically. 


MFAuthent 
This command manages MIFARE authentication to enable a secure communication to 
any MIFARE Mini, MIFARE 1K and MIFARE 4K card. The following data is written to the 
FIFO buffer before the command can be activated: 

¢ Authentication command code (60h, 61h) 

¢ Block address 

¢ Sector key byte 0 

* Sector key byte 1 

¢ Sector key byte 2 

¢ Sector key byte 3 

¢ Sector key byte 4 

¢ Sector key byte 5 

¢ Card serial number byte 0 

¢ Card serial number byte 1 

¢ Card serial number byte 2 

¢ Card serial number byte 3 


In total 12 bytes are written to the FIFO. 


Remark: When the MFAuthent command is active all access to the FIFO buffer is 
blocked. However, if there is access to the FIFO buffer, the ErrorReg register’s WrErr bit is 
set. 
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This command automatically terminates when the MIFARE card is authenticated and the 
Status2Reg register’s MFCrypto10On bit is set to logic 1. 


This command does not terminate automatically if the card does not answer, so the timer 
must be initialized to automatic mode. In this case, in addition to the IdlelRq bit, the 
TimerlRq bit can be used as the termination criteria. During authentication processing, the 
RxIRq bit and TxIRq bit are blocked. The Crypto1On bit is only valid after termination of 
the MFAuthent command, either after processing the protocol or writing Idle to the 
CommandReg register. 


If an error occurs during authentication, the ErrorReg register’s ProtocolErr bit is set to 
logic 1 and the Status2Reg register’s Crypto1On bit is set to logic 0. 
SoftReset 


This command performs a reset of the device. The configuration data of the internal buffer 
remains unchanged. All registers are set to the reset values. This command automatically 
terminates when finished. 


Remark: The SerialSpeedReg register is reset and therefore the serial data rate is set to 
9.6 kBd. 
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11. Limiting values 





Table 150. Limiting values 
In accordance with the Absolute Maximum Rating System (IEC 60134). 
























































Symbol §Parameter Conditions Min Max Unit 
Vppa analog supply voltage -0.5 +4.0 V 
Vppp digital supply voltage -0.5 +4.0 V 
Vpppvop) |PVDD supply voltage -0.5 +4.0 V 
Vppctvpp) |TVDD supply voltage -0.5 +4.0 V 
Vppsvop) |SVDD supply voltage -0.5 +4.0 V 
Vi input voltage all input pins except pins MFIN and Vssipvss) — 9.5 |Vpp(pvpp) + 0.5 | V 
RX 
pin MFIN Vsspvss) — 9.5 | Vppsvpp) + 0.5 |V 
Prot total power dissipation per package; and Vppp in shortcut - 200 mW 
mode 
Tj junction temperature - 100 °C 
Vesp electrostatic discharge voltage |HBM; 1500 , 100 pF; - 2000 V 
JESD22-A114-B 
MM; 0.75 pH, 200 pF; - 200 Vv 
JESD22-A114-A 
Charged device model; 
JESD22-C101-A 
on all pins - 200 V 
on all pins except SVDD in - 500 V 
TFBGA64 package 














12. Recommended operating conditions 





Table 151. Operating conditions 
































Symbol Parameter Conditions Min |Typ /|Max_ |Unit 
VppA analog supply voltage Vpp(PvpD < Vppa = Vppp = Vppctvpp); (2) 2.5 3.3 3.6 V 
Vssa = Vssp = Vsspvss) = Vssctvss) = 0 V 
Vppp digital supply voltage VppiPvpp) < Vopa = Vopp = Vppctvpp); (2) 2.5 3.3 3.6 V 
Vssa = Vssp = Vsspvss) = Vssctvss) = 0 V 
Vppctvpp) TVDD supply voltage Vpp(PvpD < Vppa = Vppp = Vppctvpp); (2) 2.5 3.3 3.6 V 
Vssa = Vssp = Vsspvss) = Vssctvss) = 0 V 
Vpp(Pvpb) PVDD supply voltage Vpp(PvpD < Vppa = Vppp = Vppctvpp); (31 /1.6 1.8 3.6 V 
Vssa = Vssp = Vsspvss) = Vsstvss) = 0 V 
Vppisvpp) |SVDD supply voltage = Vssa = Vssp = Vssypvss) = Vssctvss) = 0 V 16 |- 3.6 Vv 
Tamb ambient temperature HVQFN32 -25 - +85 °C 


























[1] Supply voltages below 3 V reduce the performance (the achievable operating distance). 
[2] Vppa; Vopp and Vppctvpp) must always be the same voltage. 


[3] Vppipvpp) Must always be the same or lower voltage than Vppp. 
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13. Thermal characteristics 















































































































































Table 152. Thermal characteristics 
Symbol |Parameter Conditions Package Typ Unit 
Rith(-a) —_|thermal resistance from junction to in still air with exposed pin soldered on a HVQFN32 |40_ |K/W 
ambient 4 layer JEDEC PCB 
14. Characteristics 
Table 153. Characteristics 
Symbol |Parameter Conditions Min Typ Max Unit 
Input characteristics 
Pins EA, l2C and NRSTPD 
lu input leakage current -1 - +1 HA 
Vin HIGH-level input voltage 0.7Vpp(pvpb) |- : V 
Vit LOW-level input voltage - - 0.3Vpp(pvpp) |V 
Pin MFIN 
lu input leakage current -1 - +1 pA 
Vin HIGH-level input voltage 0.7Vpp(svpb) | - - Vv 
VIL LOW-level input voltage 7 - 0.3Vppisvpp) | V 
Pin SDA 
ly input leakage current -1 - +1 pA 
Vin HIGH-level input voltage 0.7Vpp(PvbD) | - - V 
Vit LOW-level input voltage - - 0.3Vpp(pvpp) _|V 
Pin RX] 
Vj input voltage -1 - Vppa +1 V 
Ci input capacitance Vppa = 3 V; receiver active; - 10 - pF 
Vaxip-p) = 1 V; 1.5 V (DC) 
offset 
Ri input resistance Vppa = 3 V; receiver active; - 350 - Q 
Vaxip-p) = 1 V; 1.5 V (DC) 
offset 
Input voltage range; see Figure 24 
Vi(p-p)(min) | Minimum peak-to-peak input |Manchester encoded; - 100 - mV 
voltage Vppa =3 V 
Vi(p-p)(max) | Maximum peak-to-peak input |Manchester encoded; - 4 - V 
voltage Vppa =3 V 
Input sensitivity; see Figure 24 
Vmod modulation voltage minimum Manchester - 5 - mV 
encoded; Vppa = 3 V; 
RxGain[2:0] = 111b (48 dB) 
Pin OSCIN 
lh input leakage current -1 - +1 pA 
Vin HIGH-level input voltage 0.7Vppa - - V 
Vit LOW-level input voltage - - 0.3Vppa V 
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Table 153. Characteristics ...continued 
























































































































































Symbol /|Parameter Conditions Min Typ Max Unit 
Ci input capacitance Vppa = 2.8 V; DC = 0.65 V; - 2 - pF 
AC = 1 V (p-p) 
Input/output characteristics 
pins D1, D2, D3, D4, D5, D6 and D7 
lu input leakage current -1 - +1 pA 
Vin HIGH-level input voltage 0.7Vpp(pvpb) |- . V 
Vit LOW-level input voltage - 2 0.3Vpp(pvpp) + V 
Vou HIGH-level output voltage Vpp(Pvpb) =3V;lo=4mA Vpp(PvpbD) = fF Vpp(Pvpb) V 
0.4 
VoL LOW-level output voltage Vpp(Pvpb) =3V; lo =4mA Vss(pvss) * Vss(pvss) Sa V 
0.4 
lou HIGH-level output current Vpp(Pvpb) = 3 V - - mA 
lot LOW-level output current Vpppvpp) = 3 V - - 4 mA 
Output characteristics 
Pin MFOUT 
Vou HIGH-level output voltage Vppisvpb) = 3 V; lo =4mA Vpp(SvDD) —‘|- Vpp(svbD) V 
0.4 
VoL LOW-level output voltage Vpp(svpb) =3V;lo=4mA Vss(pvss) 2 Vss(Pvss) + V 
0.4 
lot LOW-level output current Vppisvop) = 3 V - - mA 
lou HIGH-level output current Vpp(svpb) =3V - - 4 mA 
Pin IRQ 
Vou HIGH-level output voltage Vpp(Pvpb) =3V;lo=4mA Vpp(PvpbD) nl Vpp(PvpbD) V 
0.4 
VoL LOW-level output voltage Vpp(Pvpb) =3V;lo=4mA Vsspvss) zi Vss(Pvss) + V 
0.4 
lot LOW-level output current Vpp(Pvpb) = 3 V - - mA 
lou HIGH-level output current Vpp(Pvpb) =3V - - 4 mA 
Pins AUX1 and AUX2 
Vou HIGH-level output voltage Vppp = 3 V; lo =4mA Vppp — 0.4 - Vppp V 
VoL LOW-level output voltage Vppp = 3 V; lo =4mA Vss(Pvss) = Vss(pvss) + V 
0.4 
lot LOW-level output current Vppp = 3 V - - 4 mA 
lou HIGH-level output current Vppp = 3 V - - 4 mA 
Pins TX1 and TX2 
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Symbol /|Parameter Conditions Min Typ Max Unit 
Vou HIGH-level output voltage = Vpptvpp) = 3 V; Vppitvpp) — | ; V 
Ipp TVDD) = 32 mA; 0.15 
CWGsP[5:0] = 3Fh 
Vppctvpp) = 3 V; Vppitvpb) —‘|- - V 
Ipp(tvpp) = 80 mA; 0.4 
CWGsP[5:0] = 3Fh 
Vppctvpb) = 2.5 V; Vppctvpb) — - V 
Ipp TVDD) = 32 mA; 0.24 
CWGsP[5:0] = 3Fh 
Vppctvpb) = 2.5 V; Vpp(tvpb) — - V 
Ipp(tvpp) = 80 mA; 0.64 
CWGsP[5:0] = 3Fh 
VoL LOW-level output voltage Vppctvpp) = 3 V; - - 0.15 V 
Ipp(tvpp) = 32 mA; 
CWGsP[5:0] = OFh 
Vppctvpp) = 3 V; - - 0.4 V 
Ipp(tvpp) = 80 mA; 
CWGsP[5:0] = OFh 
Vppitvpp) = 2.5 V; - 4 0.24 V 
Ipp(tvpp) = 32 mA; 
CWGsP[5:0] = OFh 
Vpp(tvpp =2.5 V; ae 3 0.64 V 
Ipp(tvpp) = 80 mA; 
CWGsP[5:0] = OFh 
Current consumption 
lod power-down current Vppa = Vppp = Vppctvpp) = 
Vpp(pvpp) = 3 V 
hard power-down; pin [2] | - - 5 LA 
NRSTPD set LOW 
soft power-down; RF [2] |- - 10 pA 
level detector on 
Ippp digital supply current pin DVDD; Vppp = 3 V - 6.5 9 mA 
IDDA analog supply current pin AVDD; Vppa = 3 V; - 7 10 mA 
CommandReg register’s 
bit RevOff = 0 
pin AVDD; receiver - 3 5 mA 
switched off; Vppa = 3 V; 
CommandReg register’s 
bit RevOff = 1 
Ipp(pvpp) | PVDD supply current pin PVDD [3] |- - 40 mA 
Ippctvpp) | TVDD supply current pin TVDD; continuous wave | [4I[5II61 | - 60 100 mA 
Ibp(svop) ~SVDD supply current pin SVDD [7] |- - 4 mA 
Clock frequency 
fotk clock frequency - 27.12 - MHz 
Sclk clock duty cycle 40 50 60 % 
tiit jitter time RMS - - 10 ps 








Crystal oscillator 
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Symbol |Parameter Conditions Min Typ Max Unit 

Vou HIGH-level output voltage pin OSCOUT - 11 - V 

VoL LOW-level output voltage pin OSCOUT - 0.2 - V 

C; input capacitance pin OSCOUT - 2 - pF 
pin OSCIN 7 2 - pF 

Typical input requirements 

fytal crystal frequency - 27.12 |- MHz 

ESR equivalent series resistance - - 100 Q 

CL load capacitance - 10 - pF 

Pytal crystal power dissipation - 50 100 mW 











[1] The voltage on pin RX is clamped by internal diodes to pins AVSS and AVDD. 


[2] lpg is the total current for all supplies. 


[3] Ipp(pvpp) depends on the overall load at the digital pins. 


[4] Ippctvpp) depends on Vppitvpp) and the external circuit connected to pins TX1 and TX2. 


[5] During typical circuit operation, the overall current is below 100 mA. 


[6] Typical value using a complementary driver configuration and an antenna matched to 40 Q between pins TX1 and TX2 at 13.56 MHz. 


[7] lpp(svpp) depends on the load at pin MFOUT. 


MFRC522 








Vi(p-p)(max) Ivo 


























VMID | 
13.56 MHz 
carrier | | | | 
OV 
001aak012 
Fig 24. Pin RX input voltage range 
14.1. Timing characteristics 
Table 154. SPI timing characteristics 
Symbol Parameter Conditions Min Typ Max Unit 
twe pulse width LOW line SCK 50 - - ns 
twH pulse width HIGH line SCK 50 - - ns 
thiscKH-D) |SCK HIGH to data input §SCK to changing 25 - - ns 
hold time MOSI 
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Table 154. SPI timing characteristics ...continued 




















































































































Symbol Parameter Conditions Min Typ Max Unit 
tsu(D-sckH) |data input to SCK HIGH _ {changing MOSI to 25 - - ns 
set-up time SCK 
th(SCKL-Q) SCK LOW to data output |SCK to changing - - 25 ns 
hold time MISO 
t(sckL-NSsH) | SCK LOW to NSS HIGH 0 = 7 ns 
time 
tNHNL NSS high before 50 - - ns 
communication 
Table 155. I2C-bus timing in Fast mode 
Symbol Parameter Conditions Fast mode _ /|High-speed | Unit 
mode 
Min |Max |Min Max 
fgoL SCL clock frequency 0 400 0 3400 |kHz 
tup:sta _ hold time (repeated) START after this period, 600 |- 160 - ns 
condition the first clock pulse 
is generated 
tsu:sta | Set-up time for a repeated 600 |- 160 =- ns 
START condition 
tsu:sto _|set-up time for STOP condition 600 |- 160 =- ns 
tLow LOW period of the SCL clock 1300 |- 160 =- ns 
tHIGH HIGH period of the SCL clock 600 - 60 - ns 
tup:pat__|data hold time 0 900 |0 70 ns 
tsu:pat |data set-up time 100 |- 10 - ns 
t, rise time SCL signal 20 300 10 40 ns 
tt fall time SCL signal 20 300 10 40 ns 
tr rise time SDA and SCL 20 300 10 80 ns 
signals 
ty fall time SDA and SCL 20 300 10 80 ns 
signals 
tBuF bus free time between a STOP 1.3 /- 1.3 = |- us 
and START condition 
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Remark: The signal NSS must be LOW to be able to send several bytes in one data stream. 
To send more than one data stream NSS must be set HIGH between the data streams. 


Fig 25. Timing diagram for SPI 
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SCL 























001aaj635 
Fig 26. Timing for Fast and Standard mode devices on the I2C-bus 
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15. Application information 





A typical application diagram using a complementary antenna connection to the 
MFRC522 is shown in Figure 27. 


The antenna tuning and RF part matching is described in the application note Ref. 1 and 
Ref. 2. 
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Fig 27. Typical application diagram 
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16. Test information 





16.1 Test signals 


16.1.1 Self test 
The MFRC522 has the capability to perform a digital self test. The self test is started by 
using the following procedure: 
1. Perform a soft reset. 


. Clear the internal buffer by writing 25 bytes of 00h and implement the Config 
command. 


. Enable the self test by writing 09h to the AutoTestReg register. 

. Write 00h to the FIFO buffer. 

. Start the self test with the CalcCRC command. 

. The self test is initiated. 

7. When the self test has completed, the FIFO buffer contains the following 64 bytes: 


ie) 


Oo ao ff WwW 


FIFO buffer byte values for MFRC522 version 1.0: 


00h, C6h, 37h, D5h, 32h, B7h, 57h, 5Ch, 
C2h, D8h, 7Ch, 4Dh, D9h, 70h, C7h, 73h, 
10h, E6h, D2h, AAh, 5Eh, Ath, 3Eh, 5Ah, 
14h, AFh, 30h, 61h, C9h, 70h, DBh, 2Eh, 
64h, 22h, 72h, B5h, BDh, 65h, F4h, ECh, 
22h, BCh, D3h, 72h, 35h, CDh, AAh, 41h, 
1Fh, A7h, F3h, 53h, 14h, DEh, 7Eh, 02h, 
D9h, OFh, B5h, 5Eh, 25h, 1Dh, 29h, 79h 


FIFO buffer byte values for MFRC522 version 2.0: 


00h, EBh, 66h, BAh, 57h, BFh, 23h, 95h, 
DOh, E3h, ODh, 3Dh, 27h, 89h, 5Ch, DEh, 
9Dh, 3Bh, A7h, 00h, 21h, 5Bh, 89h, 82h, 
51h, 3Ah, EBh, 02h, OCh, A5h, 00h, 49h, 
7Ch, 84h, 4Dh, B3h, CCh, D2h, 1Bh, 81h, 
5Dh, 48h, 76h, D5h, 71h, 061h, 21h, AYh, 
86h, 96h, 83h, 38h, CFh, 9Dh, 5Bh, 6Dh, 
DCh, 15h, BAh, 3Eh, 7Dh, 95h, O3Bh, 2Fh 


16.1.2 Test bus 


The test bus is used for production tests. The following configuration can be used to 
improve the design of a system using the MFRC522. The test bus allows internal signals 
to be routed to the digital interface. The test bus comprises two sets of test signals which 
are selected using their subaddress specified in the TestSel2Reg register’s 
TestBusSel[4:0] bits. The test signals and their related digital output pins are described in 
Table 156 and Table 157. 
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Table 156. Test bus signals: TestBusSel[4:0] = 07h 























Pins Internal Description 
signal name 
D6 s data received data stream 
D5 s_ coll bit-collision detected (106 kBd only) 
D4 s_valid s data ands _coll signals are valid 
D3 Ss _over receiver has detected a stop condition 
D2 RCV_reset receiver is reset 
D1 - reserved 





Table 157. Test bus signals: TestBusSel[4:0] = ODh 





























Pins Internal test |Description 
signal name 
D6 clkstable oscillator output signal 
D5 clk27/8 oscillator output signal divided by 8 
D4 to D3 ss- reserved 
D2 clk27 oscillator output signal 
D1 - reserved 








Test signals on pins AUX1 or AUX2 


The MFRC522 allows the user to select internal signals for measurement on pins AUX1 or 
AUX2. These measurements can be helpful during the design-in phase to optimize the 


design or used for test purposes. 


Table 158 shows the signals that can be switched to pin AUX1 or AUX2 by setting 
AnalogSelAux1 [3:0] or AnalogSelAux2[3:0] in the AnalogTestReg register. 


Remark: The DAC has a current output, therefore it is recommended that a 1 kQ 


pull-down resistor is connected to pin AUX1 or AUX2. 


Table 158. Test signal descriptions 






































AnalogSelAux1[3:0] Signal on pin AUX1 or pin AUX2 
r 

MVPICSeaIANOS OI 

value 

0000 3-state 

0001 DAC: register TestDAC1 or TestDAC2 

0010 DAC: test signal Corr1 

0011 reserved 

0100 DAC: test signal MinLevel 

0101 DAC: test signal ADC_| 

0110 DAC: test signal ADC_Q 

0111 to 1001 reserved 

1010 HIGH 

1011 LOW 

1100 TxActive 
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16.1.3.1 
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Table 158. Test signal descriptions ...continued 














AnalogSelAux1[3:0] Signal on pin AUX1 or pin AUX2 
r 

NelOgSatATOS O) 

value 

1101 RxActive 

1110 subcarrier detected 

1111 TstBusBit 











Example: Output test signals TestDAC1 and TestDAC2 


The AnalogTestReg register is set to 11h. The output on pin AUX1 has the test signal 
TestDAC1 and the output on pin AUX2 has the test signal TestDAC2. The signal values of 
TestDAC1 and TestDAC2 are controlled by the TestDAC1Reg and TestDAC2Reg 
registers. 


Figure 28 shows test signal TestDAC1 on pin AUX1 and TestDAC2 on pin AUX2 when the 
TestDAC1 Reg register is programmed with a slope defined by values 00h to 3Fh and the 
TestDAC2Reg register is programmed with a rectangular signal defined by values 00h 
and 3Fh. 





001aak597 






























































100 ms/div 


(1) TestDAC1 (500 mV/div) on pin AUX1. 
(2) TestDAC2 (500 mV/div) on pin AUX2. 


Fig 28. Output test signals TestDAC1 on pin AUX1 and TestDAC2 on pin AUX2 











Example: Output test signals Corr1 and MinLevel 


Figure 29 shows test signals Corr1 and MinLevel on pins AUX1 and AUX2, respectively. 
The AnalogTestReg register is set to 24h. 
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(1) 
(2) 
(3) 
Fig 29. 
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10 ps/div 


MinLevel (1 V/div) on pin AUX2. 
Corr1 (1 V/div) on pin AUX1. 
PF field. 


Output test signals Corr1 on pin AUX1 and MinLevel on pin AUX2 








16.1.3.3 | Example: Output test signals ADC channel I and ADC channel Q 


MFRC522 


Figure 30 shows the channel behavior test signals ADC_I and ADC_Q on pins AUX1 and 
AUX2, respectively. The AnalogTestReg register is set to 56h. 





Fig 30. 





001aak599 


Tt 










































































5 us/div 


ADC_1 (1 V/div) on pin AUX1. 
ADC_Q (500 mV/div) on pin AUX2. 
PF field. 


Output ADC channel | on pin AUX1 and ADC channel Q on pin AUX2 
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16.1.3.4 Example: Output test signals RxActive and TxActive 


Figure 31 shows the RxActive and TxActive test signals relating to RF communication. 
The AnalogTestReg register is set to CDh. 


¢ At 106 kBd, RxActive is HIGH during data bits, parity and CRC reception. Start bits 
are not included 

¢ At 106 kBd, TxActive is HIGH during start bits, data bits, parity and CRC transmission 

¢ At 212 kBd, 424 kBd and 848 kBd, RxActive is HIGH during data bits and CRC 
reception. Start bits are not included 


¢ At 212 kBd, 424 kBd and 848 kBd, TxActive is HIGH during data bits and CRC 
transmission 





001aak600 


fee 



















































































10 us/div 
(1) RxActive (2 V/div) on pin AUX1. 
(2) TxActive (2 V/div) on pin AUX2. 
(3) RF field. 
Fig 31. Output RxActive on pin AUX1 and TxActive on pin AUX2 
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16.1.3.5 Example: Output test signal RX data stream 


Figure 32 shows the data stream that is currently being received. The TestSel2Reg 
register’s TestBusSel[4:0] bits are set to 07h to enable test bus signals on pins D1 to D6; 
see Section 16.1.2 on page 82. The TestSel1Reg register’s TstBusBitSel[2:0] bits are set 
to 06h (pin D6 = s_data) and AnalogTestReg register is set to FFh (TstBusBit) which 
outputs the received data stream on pins AUX1 and AUX2. 








001aak601 
























































20 us/div 


(1) s_data (received data stream) (2 V/div). 
(2) FF field. 


Fig 32. Received data stream on pins AUX1 and AUX2 











16.1.3.6 PRBS 


The pseudo-random binary sequences PRBS9 and PRBS15 are based on ITU-TO150 
and are defined with the TestSel2Reg register. Transmission of either data stream is 
started by the Transmit command. The preamble/sync byte/start bit/parity bit are 
automatically generated depending on the mode selected. 


Remark: All relevant registers for transmitting data must be configured in accordance with 
ITU-TO150 before selecting PRBS transmission. 
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17. Package outline 





HVQFN3z2: plastic thermal enhanced very thin quad flat package; no leads; 
32 terminals; body 5 x 5 x 0.85 mm SOT617-1 























terminal 1 
index area 








detail X 




































































































































































terminal 1 
index area 




















DIMENSIONS (mm are the original dimensions) 


A) 
max. 





UNIT 


AY b e | DM) Dy | EM | En 





0.05 | 0.30 51 | 3.25| 5.1 | 3.25 
™ ! 1 | 900} 018 | °% | 49 | 295] 49 | 295 



























































Note 
1. Plastic or metal protrusions of 0.075 mm maximum per side are not included. 





OUTLINE REFERENCES EUROPEAN 
VERSION JEDEC JEITA PROJECTION 


SOT617-1 2: MO-220 he —-} © so SS 


Fig 33. Package outline SOT617-1 (HVQFN32) 


ISSUE DATE 
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Detailed package information can be found at: 
http:/Awww.nxp.com/package/SOT617-1.html. 


18. Handling information 





Moisture Sensitivity Level (MSL) evaluation has been performed according to 
SNW-FQ-225B rev.04/07/07 (JEDEC J-STD-020C). MSL for this package is level 1 which 
means 260 °C convection reflow temperature. 


Dry pack is not required. 


Unlimited out-of-pack floor life at maximum ambient 30 °C/85 % RH. 


19. Packing information 








The straps around the package of strap 46 mm from corner 
stacked trays inside the plano-box 

have sufficient pre-tension to avoid 

loosening of the trays. 










tray 





ESD warning preprinted 





chamfer barcode label (permanent) 





barcode label (peel-off) 














chamfer 
QA seal 








Hyatt patent preprinted 





In the traystack (2 trays) 
only ONE tray type* allowed 
*one supplier and one revision number. 


001aaj740 


printed plano box 











Fig 34. Packing information 1 tray 
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20. Abbreviations 
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Table 159. Abbreviations 





Acronym 


Description 





ADC 


Analog-to-Digital Converter 





BPSK 


Binary Phase Shift Keying 





CRG 


Cyclic Redundancy Check 





CW 


Continuous Wave 





DAC 


Digital-to-Analog Converter 





HBM 


Human Body Model 





I2C 


Inter-integrated Circuit 





LSB 


Least Significant Bit 





MISO 


Master In Slave Out 





MM 


Machine Model 





MOSI 


Master Out Slave In 





MSB 


Most Significant Bit 





NRZ 


Not Return to Zero 





NSS 


Not Slave Select 





PLL 


Phase-Locked Loop 





PRBS 


Pseudo-Random Bit Sequence 





RX 


Receiver 





SOF 


Start Of Frame 





SPI 


Serial Peripheral Interface 





TX 


Transmitter 





UART 











Universal Asynchronous Receiver Transmitter 
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23.1 Data sheet status 





Document status!"I/2] Product status!) Definition 





Objective [short] data sheet Development 


This document contains data from the objective specification for product development. 





Preliminary [short] data sheet | Qualification 


This document contains data from the preliminary specification. 














Product [short] data sheet Production 


This document contains the product specification. 








[1] Please consult the most recently issued document before initiating or completing a design. 


[2] The term ‘short data sheet’ is explained in section “Definitions”. 


[3] | The product status of device(s) described in this document may have changed since this document was published and may differ in case of multiple devices. The latest product status 


information is available on the Internet at URL http://www.nxp.com. 


23.2 Definitions 


Draft — The document is a draft version only. The content is still under 
internal review and subject to formal approval, which may result in 
modifications or additions. NXP Semiconductors does not give any 
representations or warranties as to the accuracy or completeness of 
information included herein and shall have no liability for the consequences of 
use of such information. 


Short data sheet — A short data sheet is an extract from a full data sheet 
with the same product type number(s) and title. A short data sheet is intended 
for quick reference only and should not be relied upon to contain detailed and 
full information. For detailed and full information see the relevant full data 
sheet, which is available on request via the local NXP Semiconductors sales 
office. In case of any inconsistency or conflict with the short data sheet, the 
full data sheet shall prevail. 


Product specification — The information and data provided in a Product 
data sheet shall define the specification of the product as agreed between 
NXP Semiconductors and its customer, unless NXP Semiconductors and 
customer have explicitly agreed otherwise in writing. In no event however, 
shall an agreement be valid in which the NXP Semiconductors product is 
deemed to offer functions and qualities beyond those described in the 
Product data sheet. 


23.3 Disclaimers 


Limited warranty and liability — Information in this document is believed to 
be accurate and reliable. However, NXP Semiconductors does not give any 
representations or warranties, expressed or implied, as to the accuracy or 
completeness of such information and shall have no liability for the 
consequences of use of such information. NXP Semiconductors takes no 
responsibility for the content in this document if provided by an information 
source outside of NXP Semiconductors. 


In no event shall NXP Semiconductors be liable for any indirect, incidental, 
punitive, special or consequential damages (including - without limitation - lost 
profits, lost savings, business interruption, costs related to the removal or 
replacement of any products or rework charges) whether or not such 
damages are based on tort (including negligence), warranty, breach of 
contract or any other legal theory. 


Notwithstanding any damages that customer might incur for any reason 
whatsoever, NXP Semiconductors’ aggregate and cumulative liability towards 
customer for the products described herein shall be limited in accordance 
with the Terms and conditions of commercial sale of NXP Semiconductors. 


Right to make changes — NXP Semiconductors reserves the right to make 
changes to information published in this document, including without 
limitation specifications and product descriptions, at any time and without 
notice. This document supersedes and replaces all information supplied prior 
to the publication hereof. 
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Suitability for use — NXP Semiconductors products are not designed, 
authorized or warranted to be suitable for use in life support, life-critical or 
safety-critical systems or equipment, nor in applications where failure or 
malfunction of an NXP Semiconductors product can reasonably be expected 
to result in personal injury, death or severe property or environmental 
damage. NXP Semiconductors and its suppliers accept no liability for 
inclusion and/or use of NXP Semiconductors products in such equipment or 
applications and therefore such inclusion and/or use is at the customer’s own 
risk. 


Applications — Applications that are described herein for any of these 
products are for illustrative purposes only. NXP Semiconductors makes no 
representation or warranty that such applications will be suitable for the 
specified use without further testing or modification. 


Customers are responsible for the design and operation of their applications 
and products using NXP Semiconductors products, and NXP Semiconductors 
accepts no liability for any assistance with applications or customer product 
design. It is customer’s sole responsibility to determine whether the NXP 
Semiconductors product is suitable and fit for the customer’s applications and 
products planned, as well as for the planned application and use of 
customer’s third party customer(s). Customers should provide appropriate 
design and operating safeguards to minimize the risks associated with their 
applications and products. 


NXP Semiconductors does not accept any liability related to any default, 
damage, costs or problem which is based on any weakness or default in the 
customer’s applications or products, or the application or use by customer’s 
third party customer(s). Customer is responsible for doing all necessary 
testing for the customer’s applications and products using NXP 
Semiconductors products in order to avoid a default of the applications and 
the products or of the application or use by customer’s third party 
customer(s). NXP does not accept any liability in this respect. 


Limiting values — Stress above one or more limiting values (as defined in 
the Absolute Maximum Ratings System of IEC 60134) will cause permanent 
damage to the device. Limiting values are stress ratings only and (proper) 
operation of the device at these or any other conditions above those given in 
the Recommended operating conditions section (if present) or the 
Characteristics sections of this document is not warranted. Constant or 
repeated exposure to limiting values will permanently and irreversibly affect 
the quality and reliability of the device. 


Terms and conditions of commercial sale — NXP Semiconductors 
products are sold subject to the general terms and conditions of commercial 
sale, as published at http://www.nxp.com/profile/terms, unless otherwise 
agreed in a valid written individual agreement. In case an individual 
agreement is concluded only the terms and conditions of the respective 
agreement shall apply. NXP Semiconductors hereby expressly objects to 
applying the customer’s general terms and conditions with regard to the 
purchase of NXP Semiconductors products by customer. 





No offer to sell or license — Nothing in this document may be interpreted or 
construed as an offer to sell products that is open for acceptance or the grant, 
conveyance or implication of any license under any copyrights, patents or 
other industrial or intellectual property rights. 
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Export control — This document as well as the item(s) described herein 
may be subject to export control regulations. Export might require a prior 
authorization from competent authorities. 


Quick reference data — The Quick reference data is an extract of the 
product data given in the Limiting values and Characteristics sections of this 
document, and as such is not complete, exhaustive or legally binding. 


Non-automotive qualified products — Unless this data sheet expressly 
states that this specific NXP Semiconductors product is automotive qualified, 
the product is not suitable for automotive use. It is neither qualified nor tested 
in accordance with automotive testing or application requirements. NXP 
Semiconductors accepts no liability for inclusion and/or use of 
non-automotive qualified products in automotive equipment or applications. 


In the event that customer uses the product for design-in and use in 
automotive applications to automotive specifications and standards, customer 
(a) shall use the product without NXP Semiconductors’ warranty of the 
product for such automotive applications, use and specifications, and (b) 
whenever customer uses the product for automotive applications beyond 
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NXP Semiconductors’ specifications such use shall be solely at customer’s 
own risk, and (c) customer fully indemnifies NXP Semiconductors for any 
liability, damages or failed product claims resulting from customer design and 
use of the product for automotive applications beyond NXP Semiconductors’ 
standard warranty and NXP Semiconductors’ product specifications. 


Translations — A non-English (translated) version of a document is for 
reference only. The English version shall prevail in case of any discrepancy 
between the translated and English versions. 


23.4 Trademarks 


Notice: All referenced brands, product names, service names and trademarks 
are the property of their respective owners. 


2C-bus — logo is a trademark of NXP B.V. 
MIFARE — is a trademark of NXP B.V. 





For more information, please visit: http://www.nxp.com 





For sales office addresses, please send an email to: salesaddresses@nxp.com 
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